Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-42151 (GCVE-0-2026-42151)
Vulnerability from cvelistv5 – Published: 2026-05-04 18:12 – Updated: 2026-08-11 12:04
VLAI
EPSS
VEX
Title
Prometheus Azure AD remote write OAuth client secret exposed via config API
Summary
Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth configuration (storage/remote/azuread) was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving the configuration via the /-/config HTTP API endpoint. Because the field was a plain string, the Azure OAuth client secret was exposed in plaintext to any user or process with access to that endpoint. This issue has been patched in versions 3.5.3 and 3.11.3.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
39 references
Impacted products
86 products
| Vendor | Product | Version | |
|---|---|---|---|
| prometheus | prometheus |
Affected:
< 3.5.3
Affected: >= 3.6.0, < 3.11.3 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.152.1-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:0.152.1-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | RHEM 1.0 for RHEL 9 |
Unaffected:
0:1.0.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | RHEM 1.1 for RHEL 10 |
Unaffected:
0:1.1.3-1.el10em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | RHEM 1.1 for RHEL 9 |
Unaffected:
0:1.1.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1:el9 |
|
| Red Hat | Logging for Red Hat OpenShift 6.0 |
Unaffected:
1785418915 , < *
(rpm)
cpe:/a:redhat:logging:6.0::el9 |
|
| Red Hat | Logging for Red Hat OpenShift 6.0 |
Unaffected:
1785418855 , < *
(rpm)
cpe:/a:redhat:logging:6.0::el9 |
|
| Red Hat | Logging for Red Hat OpenShift 6.0 |
Unaffected:
1785418852 , < *
(rpm)
cpe:/a:redhat:logging:6.0::el9 |
|
| Red Hat | Logging for Red Hat OpenShift 6.2 |
Unaffected:
1784747884 , < *
(rpm)
cpe:/a:redhat:logging:6.2::el9 |
|
| Red Hat | Logging for Red Hat OpenShift 6.2 |
Unaffected:
1784747816 , < *
(rpm)
cpe:/a:redhat:logging:6.2::el9 |
|
| Red Hat | Logging for Red Hat OpenShift 6.2 |
Unaffected:
1784747815 , < *
(rpm)
cpe:/a:redhat:logging:6.2::el9 |
|
| Red Hat | Multicluster Global Hub 1.4.5 |
Unaffected:
1784060681 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.4::el9 |
|
| Red Hat | Multicluster Global Hub 1.7.2 |
Unaffected:
1784906628 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.7::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502022 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502465 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502025 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502494 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502401 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502403 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502023 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502029 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502445 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194638 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194353 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784196588 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784195620 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194309 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194144 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194188 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194653 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194980 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194347 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194971 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784128388 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784128860 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126780 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127787 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126762 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127762 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126832 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126774 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127791 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127135 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126733 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127775 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
|
| Red Hat | Red Hat Hardened Images |
Unaffected:
2.19.0-1.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
|
| Red Hat | Red Hat Hardened Images |
Unaffected:
0.153.0-1.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
|
| Red Hat | Red Hat multicluster global hub 1.5.0 |
Unaffected:
1784562060 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.5::el9 |
|
| Red Hat | Red Hat multicluster global hub 1.6.0 |
Unaffected:
1784561376 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.6::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.22 |
Unaffected:
1784125078 , < *
(rpm)
cpe:/a:redhat:openshift:4.22::el9 |
|
| Red Hat | Red Hat Quay 3.1 |
Unaffected:
1783750447 , < *
(rpm)
cpe:/a:redhat:quay:3.10::el8 |
|
| Red Hat | Red Hat Quay 3.12 |
Unaffected:
1783751865 , < *
(rpm)
Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8 |
|
| Red Hat | Red Hat Quay 3.15 |
Unaffected:
1784351966 , < *
(rpm)
cpe:/a:redhat:quay:3.15::el8 |
|
| Red Hat | Red Hat Quay 3.16 |
Unaffected:
1783955846 , < *
(rpm)
cpe:/a:redhat:quay:3.16::el9 |
|
| Red Hat | Red Hat Quay 3.9 |
Unaffected:
1784125838 , < *
(rpm)
cpe:/a:redhat:quay:3.9::el8 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1783968861 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1783968468 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1783960127 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
4-1.4.2 , < *
(rpm)
Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1783329793 , < *
(rpm)
Unaffected: 1785391426 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1783329793 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1783326748 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
|
| Red Hat | Custom Metric Autoscaler operator for Red Hat Openshift |
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2 |
|
| Red Hat | File Integrity Operator |
cpe:/a:redhat:openshift_file_integrity_operator:1 |
|
| Red Hat | Logging Subsystem for Red Hat OpenShift |
cpe:/a:redhat:logging:6 |
|
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1 |
|
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed |
|
| Red Hat | OpenShift Service Mesh 2 |
cpe:/a:redhat:service_mesh:2 |
|
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2 |
|
| Red Hat | Red Hat Ceph Storage 5 |
cpe:/a:redhat:ceph_storage:5 |
|
| Red Hat | Red Hat Ceph Storage 6 |
cpe:/a:redhat:ceph_storage:6 |
|
| Red Hat | Red Hat Ceph Storage 7 |
cpe:/a:redhat:ceph_storage:7 |
|
| Red Hat | Red Hat Ceph Storage 8 |
cpe:/a:redhat:ceph_storage:8 |
|
| Red Hat | Red Hat Ceph Storage 9 |
cpe:/a:redhat:ceph_storage:9 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10 |
|
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Hardened Images |
cpe:/a:redhat:hummingbird:1 |
|
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
|
| Red Hat | Red Hat OpenShift distributed tracing 3 |
cpe:/a:redhat:openshift_distributed_tracing:3 |
|
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1 |
|
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-42151",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-04T19:54:39.314002Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-04T19:55:09.255Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.0 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el10em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1:el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/loki-rhel9-operator",
"product": "Logging for Red Hat OpenShift 6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785418915",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/lokistack-gateway-rhel9",
"product": "Logging for Red Hat OpenShift 6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785418855",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/opa-openshift-rhel9",
"product": "Logging for Red Hat OpenShift 6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785418852",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/loki-rhel9-operator",
"product": "Logging for Red Hat OpenShift 6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784747884",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/lokistack-gateway-rhel9",
"product": "Logging for Red Hat OpenShift 6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784747816",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/opa-openshift-rhel9",
"product": "Logging for Red Hat OpenShift 6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784747815",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"product": "Multicluster Global Hub 1.4.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784060681",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"product": "Multicluster Global Hub 1.7.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784906628",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alert-exporter-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502022",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alertmanager-proxy-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502465",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-api-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502025",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-cli-artifacts-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502494",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-db-setup-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502401",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-pam-issuer-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502403",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-periodic-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502022",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-telemetry-gateway-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502023",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-userinfo-proxy-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502029",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-worker-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502445",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alert-exporter-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194638",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alertmanager-proxy-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194353",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-api-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784196588",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-cli-artifacts-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784195620",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-db-setup-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194309",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-imagebuilder-api-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194144",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-imagebuilder-worker-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194188",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-pam-issuer-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194653",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-periodic-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194144",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-telemetry-gateway-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194980",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-userinfo-proxy-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194347",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-worker-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194971",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alert-exporter-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784128388",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-alertmanager-proxy-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784128860",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-api-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126780",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-cli-artifacts-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127787",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-db-setup-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126762",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-imagebuilder-api-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127762",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-imagebuilder-worker-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126832",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-pam-issuer-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126774",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-periodic-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127791",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-telemetry-gateway-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127135",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-userinfo-proxy-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126733",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-worker-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127775",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "jaeger-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2.19.0-1.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0.153.0-1.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector-contrib-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0.153.0-1.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"product": "Red Hat multicluster global hub 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784562060",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"product": "Red Hat multicluster global hub 1.6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784561376",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cluster-monitoring-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784125078",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783750447",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783751865",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784353904",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784351966",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783955846",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784125838",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/createtree-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783968861",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/updatetree-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783968861",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/certificate-transparency-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783968468",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-database-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783960127",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-logserver-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783968861",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-logsigner-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783968861",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "conforma-cli-stack-v1",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.2",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/createtree-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783329793",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1785391426",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/updatetree-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783329793",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/certificate-transparency-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783326748",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-database-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783329793",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-logserver-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783329793",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-logsigner-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783329793",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-must-gather-rhel8",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-openscap-rhel8",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-rhel8-operator",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-file-integrity-operator-bundle",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-file-integrity-rhel8-operator",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-loki-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "network-observability/network-observability-ebpf-agent-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "network-observability/network-observability-flowlogs-pipeline-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "unaffected",
"packageName": "openshift-lightspeed/openshift-mcp-server-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-cni-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-rhel8-operator",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/pilot-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/proxyv2-rhel9",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-grafana-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-multicluster-observability-addon-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-prometheus-config-reloader-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-prometheus-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/endpoint-monitoring-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/grafana-dashboard-loader-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/metrics-collector-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-observability-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/obo-prometheus-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/observatorium-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/prometheus-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/rbac-query-proxy-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/thanos-receive-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/thanos-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:5"
],
"defaultStatus": "affected",
"packageName": "rhceph/rhceph-5-dashboard-rhel8",
"product": "Red Hat Ceph Storage 5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:6"
],
"defaultStatus": "affected",
"packageName": "rhceph/rhceph-6-dashboard-rhel9",
"product": "Red Hat Ceph Storage 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:6"
],
"defaultStatus": "affected",
"packageName": "rhceph/rhceph-promtail-rhel9",
"product": "Red Hat Ceph Storage 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:7"
],
"defaultStatus": "affected",
"packageName": "rhceph/grafana-rhel9",
"product": "Red Hat Ceph Storage 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:7"
],
"defaultStatus": "affected",
"packageName": "rhceph/rhceph-promtail-rhel9",
"product": "Red Hat Ceph Storage 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:8"
],
"defaultStatus": "affected",
"packageName": "rhceph/grafana-rhel9",
"product": "Red Hat Ceph Storage 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:8"
],
"defaultStatus": "affected",
"packageName": "rhceph/rhceph-promtail-rhel9",
"product": "Red Hat Ceph Storage 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:9"
],
"defaultStatus": "affected",
"packageName": "rhceph/grafana-rhel10",
"product": "Red Hat Ceph Storage 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "host-metering",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "unaffected",
"packageName": "rust",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kserve-agent-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kserve-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kserve-router-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "microshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/cnf-tests-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/kube-metrics-server-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/kube-metrics-server-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/microshift-bootc-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-cluster-monitoring-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-prometheus",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-prometheus-config-reloader",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-prometheus-config-reloader-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-prometheus-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-prometheus-operator-admission-webhook-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-prometheus-operator-admission-webhook-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-prometheus-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-prometheus-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-prom-label-proxy",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-prom-label-proxy-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-telemeter",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-telemeter-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-thanos-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-thanos-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ztp-site-generate-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-collector-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-rhel9-operator",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-target-allocator-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-gateway-opa-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-gateway-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-query-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel9",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"packageName": "rhoso-operators/openstack-operator-bundle",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
}
],
"datePublic": "2026-05-04T18:12:16.917Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-256",
"description": "Plaintext Storage of a Password",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-11T12:04:47.550Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"name": "RHBZ#2466507",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42151.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34357"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34359"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25039"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25504"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25245"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40768"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40974"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40970"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40972"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37272"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50874"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37267"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37271"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6.0"
},
{
"lang": "en",
"value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
},
{
"lang": "en",
"value": "RHSA-2026:41030: Multicluster Global Hub 1.4.5"
},
{
"lang": "en",
"value": "RHSA-2026:47149: Multicluster Global Hub 1.7.2"
},
{
"lang": "en",
"value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:25039: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:25504: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:25245: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:40768: Red Hat OpenShift Container Platform 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:42146: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:43052: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:42796: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:41066: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:41031: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:40262: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:40974: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:40970: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:40972: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:37272: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:50874: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:37267: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:37271: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:42852: Red Hat multicluster global hub 1.5.0"
},
{
"lang": "en",
"value": "RHSA-2026:44622: Red Hat multicluster global hub 1.6.0"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-04T19:02:26.983Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-05-04T18:12:16.917Z",
"value": "Made public."
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "prometheus",
"vendor": "prometheus",
"versions": [
{
"status": "affected",
"version": "\u003c 3.5.3"
},
{
"status": "affected",
"version": "\u003e= 3.6.0, \u003c 3.11.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth configuration (storage/remote/azuread) was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving the configuration via the /-/config HTTP API endpoint. Because the field was a plain string, the Azure OAuth client secret was exposed in plaintext to any user or process with access to that endpoint. This issue has been patched in versions 3.5.3 and 3.11.3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-312",
"description": "CWE-312: Cleartext Storage of Sensitive Information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-04T18:12:16.917Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
},
{
"name": "https://github.com/prometheus/prometheus/pull/18587",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"name": "https://github.com/prometheus/prometheus/pull/18590",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"name": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"name": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
}
],
"source": {
"advisory": "GHSA-wg65-39gg-5wfj",
"discovery": "UNKNOWN"
},
"title": "Prometheus Azure AD remote write OAuth client secret exposed via config API"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-42151",
"datePublished": "2026-05-04T18:12:16.917Z",
"dateReserved": "2026-04-24T17:15:21.835Z",
"dateUpdated": "2026-08-11T12:04:47.550Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-42151",
"date": "2026-08-11",
"epss": "0.00352",
"percentile": "0.28018"
},
"microsoft_vex": {
"current_release_date": "2026-06-03T01:50:26.000Z",
"cve": "CVE-2026-42151",
"id": "msrc_CVE-2026-42151",
"initial_release_date": "2026-05-02T00:00:00.000Z",
"product_status:fixed": "1",
"product_status:known_affected": "2",
"product_status:under_investigation": "1",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Prometheus Azure AD remote write OAuth client secret exposed via config API",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-42151.json",
"version": "3"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-42151\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-05-04T19:16:04.220\",\"lastModified\":\"2026-08-10T13:19:26.880\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth configuration (storage/remote/azuread) was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving the configuration via the /-/config HTTP API endpoint. Because the field was a plain string, the Azure OAuth client secret was exposed in plaintext to any user or process with access to that endpoint. This issue has been patched in versions 3.5.3 and 3.11.3.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"prometheus\",\"product\":\"prometheus\",\"versions\":[{\"version\":\"\u003c 3.5.3\",\"status\":\"affected\"},{\"version\":\"\u003e= 3.6.0, \u003c 3.11.3\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.0 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"0:1.0.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"0:1.1.3-1.el10em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1:el9\"],\"versions\":[{\"version\":\"0:1.1.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/loki-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"],\"versions\":[{\"version\":\"1785418915\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/lokistack-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"],\"versions\":[{\"version\":\"1785418855\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/opa-openshift-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"],\"versions\":[{\"version\":\"1785418852\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/loki-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:logging:6.2::el9\"],\"versions\":[{\"version\":\"1784747884\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/lokistack-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.2::el9\"],\"versions\":[{\"version\":\"1784747816\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/opa-openshift-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.2::el9\"],\"versions\":[{\"version\":\"1784747815\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.4.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"],\"versions\":[{\"version\":\"1784060681\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.7.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"],\"versions\":[{\"version\":\"1784906628\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alert-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502022\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alertmanager-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502465\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502025\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-cli-artifacts-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502494\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-db-setup-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502401\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-pam-issuer-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502403\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-periodic-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502022\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-telemetry-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502023\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-userinfo-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502029\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-worker-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502445\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alert-exporter-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194638\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alertmanager-proxy-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194353\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-api-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784196588\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-cli-artifacts-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784195620\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-db-setup-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194309\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-imagebuilder-api-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194144\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-imagebuilder-worker-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194188\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-pam-issuer-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194653\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-periodic-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194144\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-telemetry-gateway-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194980\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-userinfo-proxy-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194347\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-worker-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194971\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alert-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784128388\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-alertmanager-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784128860\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126780\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-cli-artifacts-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127787\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-db-setup-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126762\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-imagebuilder-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127762\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-imagebuilder-worker-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126832\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-pam-issuer-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126774\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-periodic-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127791\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-telemetry-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127135\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-userinfo-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126733\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-worker-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127775\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"jaeger-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"2.19.0-1.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"0.153.0-1.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector-contrib-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"0.153.0-1.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"],\"versions\":[{\"version\":\"1784562060\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"],\"versions\":[{\"version\":\"1784561376\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-cluster-monitoring-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el9\"],\"versions\":[{\"version\":\"1784125078\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"],\"versions\":[{\"version\":\"1783750447\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.12::el8\"],\"versions\":[{\"version\":\"1783751865\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784353904\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"],\"versions\":[{\"version\":\"1784351966\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"],\"versions\":[{\"version\":\"1783955846\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"],\"versions\":[{\"version\":\"1784125838\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/createtree-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783968861\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/updatetree-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783968861\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/certificate-transparency-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783968468\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-database-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783960127\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-logserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783968861\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-logsigner-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1783968861\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"conforma-cli-stack-v1\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"4-1.4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"4-1.4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/createtree-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783329793\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1785391426\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/updatetree-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783329793\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/certificate-transparency-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783326748\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-database-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783329793\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-logserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783329793\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-logsigner-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1783329793\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-must-gather-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-openscap-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-file-integrity-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-file-integrity-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/logging-loki-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-ebpf-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-flowlogs-pipeline-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/openshift-mcp-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/pilot-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-multicluster-observability-addon-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-prometheus-config-reloader-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-prometheus-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/endpoint-monitoring-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/grafana-dashboard-loader-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/metrics-collector-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/multicluster-observability-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/obo-prometheus-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/observatorium-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/prometheus-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/rbac-query-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/thanos-receive-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/thanos-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/rhceph-5-dashboard-rhel8\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/rhceph-6-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/rhceph-promtail-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/rhceph-promtail-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/rhceph-promtail-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/grafana-rhel10\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"host-metering\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rust\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-router-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-inference-scheduler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-routing-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"microshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/cnf-tests-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/kube-metrics-server-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/kube-metrics-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/microshift-bootc-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-cluster-monitoring-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus-config-reloader\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus-config-reloader-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus-operator-admission-webhook-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus-operator-admission-webhook-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prometheus-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prom-label-proxy\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-prom-label-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-telemeter\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-telemeter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-thanos-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-thanos-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ztp-site-generate-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/opentelemetry-collector-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/opentelemetry-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/opentelemetry-target-allocator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/tempo-gateway-opa-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/tempo-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/tempo-query-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/tempo-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/openstack-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-05-04T19:54:39.314002Z\",\"id\":\"CVE-2026-42151\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"},{\"lang\":\"en\",\"value\":\"CWE-312\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-256\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:prometheus:prometheus:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.48.0\",\"versionEndExcluding\":\"3.5.3\",\"matchCriteriaId\":\"59F27955-13C7-4DD7-85E8-3D1C62BFF82E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:prometheus:prometheus:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.6.0\",\"versionEndExcluding\":\"3.11.3\",\"matchCriteriaId\":\"26BB9EEC-D049-4268-953C-E90B253745CE\"}]}]}],\"references\":[{\"url\":\"https://github.com/prometheus/prometheus/pull/18587\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://github.com/prometheus/prometheus/pull/18590\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://github.com/prometheus/prometheus/releases/tag/v3.11.3\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/prometheus/prometheus/releases/tag/v3.5.3\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25039\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25245\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25504\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34357\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34359\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36797\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37267\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37271\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37272\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40118\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40768\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40945\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40970\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40972\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40974\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41019\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41030\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41031\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41066\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42146\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42852\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43052\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:44622\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47149\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47952\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50843\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50874\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-42151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2466507\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42151.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-08-11T20:37:16+00:00",
"cve": "CVE-2026-42151",
"id": "CVE-2026-42151",
"initial_release_date": "2026-05-04T18:12:16.917000+00:00",
"product_status:fixed": "228",
"product_status:known_affected": "66",
"product_status:known_not_affected": "1067",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42151.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-07-07T02:23:35Z",
"cve": "CVE-2026-42151",
"id": "CVE-2026-42151",
"initial_release_date": "2026-05-06T01:41:39Z",
"product_status:known_affected": "3",
"product_status:recommended": "110",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-42151",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-42151.json",
"version": "6"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.0 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el10em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1:el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785418915\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/loki-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785418855\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/lokistack-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785418852\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/opa-openshift-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784747884\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/loki-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784747816\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/lokistack-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784747815\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/opa-openshift-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.4.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784060681\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.7.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784906628\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502022\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alert-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502465\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alertmanager-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502025\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-api-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502494\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-cli-artifacts-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502401\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-db-setup-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502403\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-pam-issuer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502022\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-periodic-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502023\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-telemetry-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502029\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-userinfo-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502445\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-worker-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194638\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alert-exporter-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194353\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alertmanager-proxy-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784196588\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-api-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784195620\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-cli-artifacts-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194309\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-db-setup-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194144\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-imagebuilder-api-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194188\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-imagebuilder-worker-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194653\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-pam-issuer-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194144\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-periodic-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194980\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-telemetry-gateway-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194347\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-userinfo-proxy-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194971\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-worker-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784128388\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alert-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784128860\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-alertmanager-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126780\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-api-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127787\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-cli-artifacts-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126762\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-db-setup-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127762\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-imagebuilder-api-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126832\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-imagebuilder-worker-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126774\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-pam-issuer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127791\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-periodic-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127135\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-telemetry-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126733\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-userinfo-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127775\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-worker-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2.19.0-1.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"jaeger-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0.153.0-1.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0.153.0-1.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector-contrib-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784562060\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784561376\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784125078\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-cluster-monitoring-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783750447\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783751865\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784353904\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784351966\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783955846\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784125838\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783968861\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/createtree-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783968861\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/updatetree-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783968468\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/certificate-transparency-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783960127\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-database-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783968861\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-logserver-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783968861\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-logsigner-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4-1.4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"4-1.4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"conforma-cli-stack-v1\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783329793\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1785391426\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/createtree-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783329793\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/updatetree-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783326748\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/certificate-transparency-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783329793\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-database-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783329793\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-logserver-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783329793\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-logsigner-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-must-gather-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-openscap-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-file-integrity-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-file-integrity-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/logging-loki-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-ebpf-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-flowlogs-pipeline-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/openshift-mcp-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/istio-cni-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/istio-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/pilot-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/proxyv2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-multicluster-observability-addon-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-prometheus-config-reloader-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-prometheus-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/endpoint-monitoring-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/grafana-dashboard-loader-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/metrics-collector-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/multicluster-observability-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/obo-prometheus-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/observatorium-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/prometheus-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/rbac-query-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/thanos-receive-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/thanos-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:5\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 5\", \"packageName\": \"rhceph/rhceph-5-dashboard-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 6\", \"packageName\": \"rhceph/rhceph-6-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 6\", \"packageName\": \"rhceph/rhceph-promtail-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 7\", \"packageName\": \"rhceph/grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 7\", \"packageName\": \"rhceph/rhceph-promtail-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 8\", \"packageName\": \"rhceph/grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 8\", \"packageName\": \"rhceph/rhceph-promtail-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 9\", \"packageName\": \"rhceph/grafana-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"host-metering\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"packageName\": \"rust\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-router-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-inference-scheduler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-routing-sidecar-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"microshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/cnf-tests-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/kube-metrics-server-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/kube-metrics-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/microshift-bootc-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-cluster-monitoring-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus-config-reloader\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus-config-reloader-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus-operator-admission-webhook-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus-operator-admission-webhook-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prometheus-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prom-label-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-prom-label-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-telemeter\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-telemeter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-thanos-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-thanos-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ztp-site-generate-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/opentelemetry-collector-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/opentelemetry-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/opentelemetry-target-allocator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/tempo-gateway-opa-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/tempo-gateway-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/tempo-query-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/tempo-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/openstack-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-05-04T19:02:26.983Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-05-04T18:12:16.917Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36796: RHEM 1.0 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50843: Logging for Red Hat OpenShift 6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47952: Logging for Red Hat OpenShift 6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41030: Multicluster Global Hub 1.4.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47149: Multicluster Global Hub 1.7.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36651: Red Hat Edge Manager 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40945: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40118: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25039: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25504: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25245: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40768: Red Hat OpenShift Container Platform 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42146: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43052: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42796: Red Hat Quay 3.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41066: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41031: Red Hat Quay 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40262: Red Hat Quay 3.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40974: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40970: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40972: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37272: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50874: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37267: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37271: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42852: Red Hat multicluster global hub 1.5.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:44622: Red Hat multicluster global hub 1.6.0\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-05-04T18:12:16.917Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-42151\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2466507\", \"name\": \"RHBZ#2466507\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42151.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41019\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34357\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34359\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50843\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47952\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41030\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47149\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40945\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40118\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25039\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25504\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25245\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40768\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42146\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43052\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41066\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41031\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40974\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40970\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40972\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36797\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37272\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50874\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37267\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37271\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42852\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:44622\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-256\", \"description\": \"Plaintext Storage of a Password\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-08-11T12:04:47.550Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-42151\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-04T19:54:39.314002Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-04T19:54:59.725Z\"}}], \"cna\": {\"title\": \"Prometheus Azure AD remote write OAuth client secret exposed via config API\", \"source\": {\"advisory\": \"GHSA-wg65-39gg-5wfj\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"prometheus\", \"product\": \"prometheus\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 3.5.3\"}, {\"status\": \"affected\", \"version\": \"\u003e= 3.6.0, \u003c 3.11.3\"}]}], \"references\": [{\"url\": \"https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj\", \"name\": \"https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/prometheus/prometheus/pull/18587\", \"name\": \"https://github.com/prometheus/prometheus/pull/18587\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/prometheus/prometheus/pull/18590\", \"name\": \"https://github.com/prometheus/prometheus/pull/18590\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/prometheus/prometheus/releases/tag/v3.11.3\", \"name\": \"https://github.com/prometheus/prometheus/releases/tag/v3.11.3\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/prometheus/prometheus/releases/tag/v3.5.3\", \"name\": \"https://github.com/prometheus/prometheus/releases/tag/v3.5.3\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth configuration (storage/remote/azuread) was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving the configuration via the /-/config HTTP API endpoint. Because the field was a plain string, the Azure OAuth client secret was exposed in plaintext to any user or process with access to that endpoint. This issue has been patched in versions 3.5.3 and 3.11.3.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-200\", \"description\": \"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor\"}]}, {\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-312\", \"description\": \"CWE-312: Cleartext Storage of Sensitive Information\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-05-04T18:12:16.917Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-42151\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-11T12:04:47.550Z\", \"dateReserved\": \"2026-04-24T17:15:21.835Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-05-04T18:12:16.917Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:42146
Vulnerability from csaf_redhat - Published: 2026-07-20 18:41 - Updated: 2026-08-11 21:27Summary
Red Hat Security Advisory: Red Hat Quay 3.12.20
Severity
Important
Notes
Topic: Red Hat Quay 3.12.20 is now available with bug fixes.
Details: Quay 3.12.20
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
References
173 references
Acknowledgments
Antony Di Scala
Michael Whale
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.12.20 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.12.20",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42146",
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42146.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.12.20",
"tracking": {
"current_release_date": "2026-08-11T21:27:45+00:00",
"generator": {
"date": "2026-08-11T21:27:45+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:42146",
"initial_release_date": "2026-07-20T18:41:52+00:00",
"revision_history": [
{
"date": "2026-07-20T18:41:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T21:27:45+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.12",
"product": {
"name": "Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.12::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1783751331"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Aa3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783750355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Ad5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1783751577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Af17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783750853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Abf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1783750687"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Aa72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783750391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3A708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1783756364"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Adb891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783751561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783751865"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783750355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783750853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Aab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692?arch=arm64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783750391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783751561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783751865"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783750355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783750853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Aa91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783750391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Ab8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783751561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Af6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783751865"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ae66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783750355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Ac5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783750853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Aa4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783750391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783751561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783751865"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
]
}
RHSA-2026:42796
Vulnerability from csaf_redhat - Published: 2026-07-21 13:53 - Updated: 2026-08-11 21:28Summary
Red Hat Security Advisory: Red Hat Quay 3.15.6
Severity
Important
Notes
Topic: Red Hat Quay 3.15.6 is now available with bug fixes.
Details: Quay 3.15.6
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client's event loop to freeze. This prevents critical operations such as sending messages, polling for new messages, and maintaining heartbeats, ultimately leading to consumer group eviction and persistent connection failures.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.
7.4 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
References
217 references
Acknowledgments
Antony Di Scala
Michael Whale
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.15.6 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.15.6",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42796",
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10143",
"url": "https://access.redhat.com/security/cve/CVE-2026-10143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44432",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48526",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42796.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.15.6",
"tracking": {
"current_release_date": "2026-08-11T21:28:08+00:00",
"generator": {
"date": "2026-08-11T21:28:08+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:42796",
"initial_release_date": "2026-07-21T13:53:09+00:00",
"revision_history": [
{
"date": "2026-07-21T13:53:09+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T21:28:08+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.15",
"product": {
"name": "Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.15::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3Ab42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1784352323"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784351626"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1784352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Ae328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784351655"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1784352052"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784351680"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Abdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784351652"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3Aab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1784356254"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784351641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784351966"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Af6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784351626"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Ace5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784351655"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784351680"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784351652"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Aefcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784351641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784351966"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784351626"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784351655"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784351680"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784351652"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784351641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784351966"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-10143",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-10T21:02:14.712750+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487722"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client\u0027s event loop to freeze. This prevents critical operations such as sending messages, polling for new messages, and maintaining heartbeats, ultimately leading to consumer group eviction and persistent connection failures.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10143"
},
{
"category": "external",
"summary": "RHBZ#2487722",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487722"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10143"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b",
"url": "https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/pull/3019",
"url": "https://github.com/dpkp/kafka-python/pull/3019"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/pull/3026",
"url": "https://github.com/dpkp/kafka-python/pull/3026"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/kafka-python-prior-to-dos-via-scram-iteration-count-in-scram-py",
"url": "https://www.vulncheck.com/advisories/kafka-python-prior-to-dos-via-scram-iteration-count-in-scram-py"
}
],
"release_date": "2026-06-10T20:22:39.262000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44432",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-05-13T17:01:01.083841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "RHBZ#2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
}
],
"release_date": "2026-05-13T15:17:12.611000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-48526",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-28T16:01:22.805235+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482734"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer\u0027s public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in PyJWT allows for authentication bypass and unauthorized access. It occurs when a JWT verifier is misconfigured to accept both symmetric and asymmetric algorithms, and a public JSON Web Key is erroneously used as the HMAC secret. Red Hat products are only affected if they utilize this specific, non-standard verifier configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "RHBZ#2482734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx"
}
],
"release_date": "2026-05-28T15:09:09.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
}
]
}
RHSA-2026:42852
Vulnerability from csaf_redhat - Published: 2026-07-21 14:36 - Updated: 2026-08-11 21:28Summary
Red Hat Security Advisory: Multicluster Global Hub 1.5.6 security update
Severity
Important
Notes
Topic: Multicluster Global Hub v1.5.6 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Important.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw in Grafana's Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Moby, the open-source container framework, and Docker Engine. A malicious container image can exploit this vulnerability to achieve arbitrary code execution with full daemon privileges, including host root access. This occurs when a user uploads a compressed archive to the container, as the daemon incorrectly uses decompression binaries from the container's filesystem. This allows an attacker to gain complete control over the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64 | — |
Vendor Fix
fix
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64 | — |
Vendor Fix
fix
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x | — |
Threats
Impact
Important
A flaw was found in Apache Thrift. This vulnerability encompasses an origin validation error, improper limitation of a pathname to a restricted directory (path traversal), and improper neutralization of CRLF sequences in HTTP headers (HTTP request/response splitting). A remote attacker could exploit these issues to trigger uncontrolled resource consumption, leading to a Denial of Service (DoS) condition. Furthermore, path traversal could allow unauthorized access to files, and HTTP request/response splitting might enable other web-based attacks.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x | — |
Workaround
|
Threats
Impact
Important
An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system's CPU is consumed indefinitely until the process is terminated.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.
8.2 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64 | — |
Threats
Impact
Important
References
103 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Multicluster Global Hub v1.5.6 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42852",
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33376",
"url": "https://access.redhat.com/security/cve/CVE-2026-33376"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33377",
"url": "https://access.redhat.com/security/cve/CVE-2026-33377"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41567",
"url": "https://access.redhat.com/security/cve/CVE-2026-41567"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-43870",
"url": "https://access.redhat.com/security/cve/CVE-2026-43870"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46384",
"url": "https://access.redhat.com/security/cve/CVE-2026-46384"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46385",
"url": "https://access.redhat.com/security/cve/CVE-2026-46385"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42852.json"
}
],
"title": "Red Hat Security Advisory: Multicluster Global Hub 1.5.6 security update",
"tracking": {
"current_release_date": "2026-08-11T21:28:10+00:00",
"generator": {
"date": "2026-08-11T21:28:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:42852",
"initial_release_date": "2026-07-21T14:36:23+00:00",
"revision_history": [
{
"date": "2026-07-21T14:36:23+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T21:28:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat multicluster global hub 1.5.0",
"product": {
"name": "Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat multicluster global hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Af58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784562060"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784127491"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784128029"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3A8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1784565261"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784127524"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784127173"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Aecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784562060"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784127491"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Addfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784128029"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Ac00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784127524"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3Ab22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784127173"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784562060"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784127491"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Aff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784128029"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Aedd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784127524"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784127173"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784562060"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784127491"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Adbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784128029"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784127524"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3Ac6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784127173"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64 as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64 as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64 as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64 as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64 as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64 as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64 as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64 as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64 as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64 as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64 as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x as a component of Red Hat multicluster global hub 1.5.0",
"product_id": "Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.5.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:36:23+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:36:23+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33376",
"cwe": {
"id": "CWE-183",
"name": "Permissive List of Allowed Inputs"
},
"discovery_date": "2026-05-13T20:02:51.602978+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477262"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list defaults to an overly broad /32 mask, potentially allowing unauthorized access. This strictly affects Auth Proxy deployments using IPv6 allow-lists; other authentication methods are unaffected. This has been rated moderate since auth proxy authentication is not enabled by default on grafana shipped on RHEL.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33376"
},
{
"category": "external",
"summary": "RHBZ#2477262",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477262"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33376"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-33376",
"url": "https://grafana.com/security/security-advisories/cve-2026-33376"
}
],
"release_date": "2026-05-13T19:28:34.473000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:36:23+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"category": "workaround",
"details": "To mitigate this issue, explicitly specify the intended IPv6 address mask\u2014typically /128 for a single host\u2014within the Grafana Auth Proxy allow-list configuration. This overrides the incorrect default /32 mask, ensuring that network access restrictions are applied strictly as intended.\nFor RHEL: Update the whitelist directive under the [auth.proxy] section in /etc/grafana/grafana.ini. For example, if ::1 is the desired address, configure it explicitly as ::1/128. A restart of the Grafana service (systemctl restart grafana-server) is required for the changes to take effect.",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default"
},
{
"cve": "CVE-2026-33377",
"cwe": {
"id": "CWE-267",
"name": "Privilege Defined With Unsafe Actions"
},
"discovery_date": "2026-05-13T20:02:01.027996+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477246"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana: Privilege escalation via dashboard overwrite",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A privilege escalation flaw exists in Grafana, allowing an authenticated editor with write access to a dashboard to overwrite other dashboards not owned by them. This grants the editor administrative control over the targeted dashboard, potentially leading to unauthorized data manipulation or exposure within the Grafana environment.\n\nRed Hat\u0027s default deployment does not grant edit access to normal users. Hence, this is rated moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33377"
},
{
"category": "external",
"summary": "RHBZ#2477246",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477246"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33377",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33377"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-33377",
"url": "https://grafana.com/security/security-advisories/cve-2026-33377"
}
],
"release_date": "2026-05-13T19:28:28.154000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:36:23+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"category": "workaround",
"details": "Audit dashboard-level permissions to ensure that write access is granted only to users who should be able to modify each specific dashboard. Revoke per-dashboard write permissions from Editor users who do not strictly require them.",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana: Privilege escalation via dashboard overwrite"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:36:23+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:36:23+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-41567",
"cwe": {
"id": "CWE-427",
"name": "Uncontrolled Search Path Element"
},
"discovery_date": "2026-06-05T02:00:54.488930+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2485356"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Moby, the open-source container framework, and Docker Engine. A malicious container image can exploit this vulnerability to achieve arbitrary code execution with full daemon privileges, including host root access. This occurs when a user uploads a compressed archive to the container, as the daemon incorrectly uses decompression binaries from the container\u0027s filesystem. This allows an attacker to gain complete control over the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. A flaw in Moby and Docker Engine allows for arbitrary code execution with host root privileges. This occurs when a user uploads a compressed archive to a container, as the daemon incorrectly uses decompression binaries from the container\u0027s filesystem. This could lead to a complete compromise of the host system if a malicious container image is utilized.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41567"
},
{
"category": "external",
"summary": "RHBZ#2485356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41567",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41567"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41567",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41567"
},
{
"category": "external",
"summary": "https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r",
"url": "https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r"
}
],
"release_date": "2026-06-05T00:35:50.563000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:36:23+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"category": "workaround",
"details": "To mitigate this issue, Red Hat recommends only running containers from trusted images. Additionally, users should avoid piping compressed archives into containers created from untrusted images. For environments utilizing authorization plugins, restricting access to the `PUT /containers/{id}/archive` endpoint can further reduce exposure.",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:36:23+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:36:23+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-43870",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-05T09:01:02.388589+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466671"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift. This vulnerability encompasses an origin validation error, improper limitation of a pathname to a restricted directory (path traversal), and improper neutralization of CRLF sequences in HTTP headers (HTTP request/response splitting). A remote attacker could exploit these issues to trigger uncontrolled resource consumption, leading to a Denial of Service (DoS) condition. Furthermore, path traversal could allow unauthorized access to files, and HTTP request/response splitting might enable other web-based attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Apache Thrift allows a remote attacker to trigger a denial of service through uncontrolled resource consumption. Additionally, the vulnerability enables path traversal for unauthorized file access and HTTP request/response splitting, potentially leading to further web-based attacks in Red Hat products that integrate Apache Thrift.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43870"
},
{
"category": "external",
"summary": "RHBZ#2466671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43870"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43870",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43870"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/pgtfq44ltc9t63kxcbqmwqzt45pnhqdy",
"url": "https://lists.apache.org/thread/pgtfq44ltc9t63kxcbqmwqzt45pnhqdy"
}
],
"release_date": "2026-05-05T07:45:35.699000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:36:23+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities"
},
{
"cve": "CVE-2026-46384",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-29T21:02:03.061736+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483482"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects multiple Avro decoder code paths in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing malformed or excessively large integer values that trigger unsafe integer truncation, arithmetic overflow conditions, or invalid memory allocation operations during decoding.\n\nThe vulnerability affects both 32-bit specific integer narrowing paths and several cross-platform arithmetic overflow conditions. There is only a denial-of-service impact but not confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46384"
},
{
"category": "external",
"summary": "RHBZ#2483482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483482"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46384"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv"
}
],
"release_date": "2026-05-29T19:58:21.535000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:36:23+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder"
},
{
"cve": "CVE-2026-46385",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-05-29T21:01:37.087371+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483475"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system\u0027s CPU is consumed indefinitely until the process is terminated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects Avro array and map decoding functionality in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing excessively large block-count values followed by truncated or invalid data. Because the decoder continued iterating after the underlying reader entered an error state, affected applications may consume excessive CPU resources for extended periods of time, potentially leading to denial of service.\n\nThe currently available analysis demonstrates CPU exhaustion and service disruption but does not demonstrate confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46385"
},
{
"category": "external",
"summary": "RHBZ#2483475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483475"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46385"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w"
}
],
"release_date": "2026-05-29T19:58:59.667000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:36:23+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:36:23+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
},
{
"cve": "CVE-2026-53492",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-01T19:01:34.238078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496130"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "RHBZ#2496130",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
}
],
"release_date": "2026-07-01T17:59:12.552000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T14:36:23+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42852"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:2e071c3bb6f1fec229b53557556feffaa8f3137fbf50444ddbf50eb99eacb571_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:65b21ad0d3524d3646d256224376d5cdc6e168ca4a888211a6544448c3d1ba5b_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:802fab4ed4895751fae71a3f1ca7402e73a95a8cbf31bc83d3935ed2b27886f2_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:8f43a432db2cd48fa4af89f053fbfec80cbe295f4682ae6a67ce51971fa96d3e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:534f21b4fa204a463f8bef0ed54eee2bf66e549e92ede32dad3ae67a32779b3c_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:8a0d6dd45f38bf49e18944c3dd487035b4866e36453bd2a322918ce03f2262db_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ecae6850a68896cf10e7c2c2b9d23987ee2b9108618a33b98d8a372d3649dd6a_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f58b750ede7e9dbce58f763c6cdf74901499619a15fe8f57590ea647f08267ad_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:371474d8fe061de9129e2f8f65058c179aa1f9f19c6d1acb671235b22551e8af_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dbabc66991a633163cc07ee1e104bd2bf1ae52eb85ac2efd9d9d1c400b1be30c_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ddfcd7a87576306c460973e055aa4cc592c8240387e8e391b5cfe79810f42d82_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ff3090c12380fbd77d9e6932395658624332c0ef37498a608332f89dcd82a630_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:8938c8e6627cc3065ad04d5dc3eb29114de2c1fc7a13b49204f0103bbb0411c8_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:085bed6a41ccdfcc6a12f1156171c9c53c9f3c7c25b660b8f5cf482f5a3f76b4_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7ebd83b265ed7bafc8461909844f8d7cdde691a3c69a5dd6646adb26b281ca8e_s390x",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b22867f265404f708b8c920f351b5c0e0afe02ab4aa99dc28ed7232ad70a5981_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:c6b8fdbc7880fbf5473375970fa34430ab5607d8d0a3da27e61bcfdc7fabed54_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:749ad711d2e6d877684eff67674dafccac43d15ea372fcd5898d2eb53a1767e4_arm64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:7cddde99d5db412a174f95bc15f568d4a2f7ecf3c00736ae777414ebd28d7efc_amd64",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:c00c88c6bb1adfc7b06c930e30121cdc9ec783ca88582789d7844f399f1a5730_ppc64le",
"Red Hat multicluster global hub 1.5.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:edd270e4b896aa26e6d7f5b4a8a8cc0143bca3e8fb64c232dc09b238a877e8c0_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
}
]
}
RHSA-2026:43052
Vulnerability from csaf_redhat - Published: 2026-07-21 22:47 - Updated: 2026-08-11 21:28Summary
Red Hat Security Advisory: Red Hat Quay 3.12.20
Severity
Important
Notes
Topic: Red Hat Quay 3.12.20 is now available with bug fixes.
Details: Quay 3.12.20
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
References
173 references
Acknowledgments
Antony Di Scala
Michael Whale
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.12.20 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.12.20",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:43052",
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_43052.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.12.20",
"tracking": {
"current_release_date": "2026-08-11T21:28:08+00:00",
"generator": {
"date": "2026-08-11T21:28:08+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:43052",
"initial_release_date": "2026-07-21T22:47:21+00:00",
"revision_history": [
{
"date": "2026-07-21T22:47:21+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T21:28:08+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.12",
"product": {
"name": "Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.12::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1784356439"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ac3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784355757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1784355382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Adc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784354711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1784353500"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784353436"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784353287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3Aeeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1784358506"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784354521"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784353904"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784355757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Ad8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784354711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Adc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784353436"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9?arch=arm64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784353287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Aa661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784354521"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Ac766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784353904"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Afe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784355757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784354711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784353436"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784353287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Aba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784354521"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Aa1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784353904"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784355757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784354711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784353436"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Aaec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784353287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Ae74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784354521"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Aa91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784353904"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
]
}
RHSA-2026:44622
Vulnerability from csaf_redhat - Published: 2026-07-23 18:36 - Updated: 2026-08-11 21:28Summary
Red Hat Security Advisory: Multicluster Global Hub 1.6.4 security update
Severity
Important
Notes
Topic: Multicluster Global Hub v1.6.4 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Important.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw in Grafana's Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Moby, the open-source container framework, and Docker Engine. A malicious container image can exploit this vulnerability to achieve arbitrary code execution with full daemon privileges, including host root access. This occurs when a user uploads a compressed archive to the container, as the daemon incorrectly uses decompression binaries from the container's filesystem. This allows an attacker to gain complete control over the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Vendor Fix
fix
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Vendor Fix
fix
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Threats
Impact
Important
A flaw was found in Apache Thrift. This vulnerability encompasses an origin validation error, improper limitation of a pathname to a restricted directory (path traversal), and improper neutralization of CRLF sequences in HTTP headers (HTTP request/response splitting). A remote attacker could exploit these issues to trigger uncontrolled resource consumption, leading to a Denial of Service (DoS) condition. Furthermore, path traversal could allow unauthorized access to files, and HTTP request/response splitting might enable other web-based attacks.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Workaround
|
Threats
Impact
Important
An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system's CPU is consumed indefinitely until the process is terminated.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.
8.2 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — | ||
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — |
Threats
Impact
Important
A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass route-level access controls, leading to unauthorized information disclosure by reading static files.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 | — |
Workaround
|
Threats
Impact
Important
References
118 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Multicluster Global Hub v1.6.4 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:44622",
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33376",
"url": "https://access.redhat.com/security/cve/CVE-2026-33376"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33377",
"url": "https://access.redhat.com/security/cve/CVE-2026-33377"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41567",
"url": "https://access.redhat.com/security/cve/CVE-2026-41567"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-43870",
"url": "https://access.redhat.com/security/cve/CVE-2026-43870"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46384",
"url": "https://access.redhat.com/security/cve/CVE-2026-46384"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46385",
"url": "https://access.redhat.com/security/cve/CVE-2026-46385"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55677",
"url": "https://access.redhat.com/security/cve/CVE-2026-55677"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_44622.json"
}
],
"title": "Red Hat Security Advisory: Multicluster Global Hub 1.6.4 security update",
"tracking": {
"current_release_date": "2026-08-11T21:28:39+00:00",
"generator": {
"date": "2026-08-11T21:28:39+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:44622",
"initial_release_date": "2026-07-23T18:36:47+00:00",
"revision_history": [
{
"date": "2026-07-23T18:36:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T21:28:39+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat multicluster global hub 1.6.0",
"product": {
"name": "Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat multicluster global hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Af7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784561376"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Aba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784152046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Ae9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784151884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3A2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1784728578"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Af356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784151772"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3Aeefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784152164"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784561376"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784152046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Aae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784151884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784151772"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784152164"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784561376"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784152046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Abbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784151884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784151772"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784152164"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Ae7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784561376"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784152046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Af4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784151884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784151772"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784152164"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64 as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64 as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64 as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64 as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64 as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64 as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64 as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64 as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64 as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64 as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64 as a component of Red Hat multicluster global hub 1.6.0",
"product_id": "Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64",
"relates_to_product_reference": "Red Hat multicluster global hub 1.6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33376",
"cwe": {
"id": "CWE-183",
"name": "Permissive List of Allowed Inputs"
},
"discovery_date": "2026-05-13T20:02:51.602978+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477262"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list defaults to an overly broad /32 mask, potentially allowing unauthorized access. This strictly affects Auth Proxy deployments using IPv6 allow-lists; other authentication methods are unaffected. This has been rated moderate since auth proxy authentication is not enabled by default on grafana shipped on RHEL.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33376"
},
{
"category": "external",
"summary": "RHBZ#2477262",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477262"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33376"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-33376",
"url": "https://grafana.com/security/security-advisories/cve-2026-33376"
}
],
"release_date": "2026-05-13T19:28:34.473000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"category": "workaround",
"details": "To mitigate this issue, explicitly specify the intended IPv6 address mask\u2014typically /128 for a single host\u2014within the Grafana Auth Proxy allow-list configuration. This overrides the incorrect default /32 mask, ensuring that network access restrictions are applied strictly as intended.\nFor RHEL: Update the whitelist directive under the [auth.proxy] section in /etc/grafana/grafana.ini. For example, if ::1 is the desired address, configure it explicitly as ::1/128. A restart of the Grafana service (systemctl restart grafana-server) is required for the changes to take effect.",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default"
},
{
"cve": "CVE-2026-33377",
"cwe": {
"id": "CWE-267",
"name": "Privilege Defined With Unsafe Actions"
},
"discovery_date": "2026-05-13T20:02:01.027996+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477246"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana: Privilege escalation via dashboard overwrite",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A privilege escalation flaw exists in Grafana, allowing an authenticated editor with write access to a dashboard to overwrite other dashboards not owned by them. This grants the editor administrative control over the targeted dashboard, potentially leading to unauthorized data manipulation or exposure within the Grafana environment.\n\nRed Hat\u0027s default deployment does not grant edit access to normal users. Hence, this is rated moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33377"
},
{
"category": "external",
"summary": "RHBZ#2477246",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477246"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33377",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33377"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-33377",
"url": "https://grafana.com/security/security-advisories/cve-2026-33377"
}
],
"release_date": "2026-05-13T19:28:28.154000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"category": "workaround",
"details": "Audit dashboard-level permissions to ensure that write access is granted only to users who should be able to modify each specific dashboard. Revoke per-dashboard write permissions from Editor users who do not strictly require them.",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana: Privilege escalation via dashboard overwrite"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-41567",
"cwe": {
"id": "CWE-427",
"name": "Uncontrolled Search Path Element"
},
"discovery_date": "2026-06-05T02:00:54.488930+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2485356"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Moby, the open-source container framework, and Docker Engine. A malicious container image can exploit this vulnerability to achieve arbitrary code execution with full daemon privileges, including host root access. This occurs when a user uploads a compressed archive to the container, as the daemon incorrectly uses decompression binaries from the container\u0027s filesystem. This allows an attacker to gain complete control over the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. A flaw in Moby and Docker Engine allows for arbitrary code execution with host root privileges. This occurs when a user uploads a compressed archive to a container, as the daemon incorrectly uses decompression binaries from the container\u0027s filesystem. This could lead to a complete compromise of the host system if a malicious container image is utilized.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41567"
},
{
"category": "external",
"summary": "RHBZ#2485356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41567",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41567"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41567",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41567"
},
{
"category": "external",
"summary": "https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r",
"url": "https://github.com/moby/moby/security/advisories/GHSA-x86f-5xw2-fm2r"
}
],
"release_date": "2026-06-05T00:35:50.563000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"category": "workaround",
"details": "To mitigate this issue, Red Hat recommends only running containers from trusted images. Additionally, users should avoid piping compressed archives into containers created from untrusted images. For environments utilizing authorization plugins, restricting access to the `PUT /containers/{id}/archive` endpoint can further reduce exposure.",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-43870",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-05T09:01:02.388589+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466671"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift. This vulnerability encompasses an origin validation error, improper limitation of a pathname to a restricted directory (path traversal), and improper neutralization of CRLF sequences in HTTP headers (HTTP request/response splitting). A remote attacker could exploit these issues to trigger uncontrolled resource consumption, leading to a Denial of Service (DoS) condition. Furthermore, path traversal could allow unauthorized access to files, and HTTP request/response splitting might enable other web-based attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Apache Thrift allows a remote attacker to trigger a denial of service through uncontrolled resource consumption. Additionally, the vulnerability enables path traversal for unauthorized file access and HTTP request/response splitting, potentially leading to further web-based attacks in Red Hat products that integrate Apache Thrift.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43870"
},
{
"category": "external",
"summary": "RHBZ#2466671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43870"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43870",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43870"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/pgtfq44ltc9t63kxcbqmwqzt45pnhqdy",
"url": "https://lists.apache.org/thread/pgtfq44ltc9t63kxcbqmwqzt45pnhqdy"
}
],
"release_date": "2026-05-05T07:45:35.699000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities"
},
{
"cve": "CVE-2026-46384",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-29T21:02:03.061736+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483482"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects multiple Avro decoder code paths in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing malformed or excessively large integer values that trigger unsafe integer truncation, arithmetic overflow conditions, or invalid memory allocation operations during decoding.\n\nThe vulnerability affects both 32-bit specific integer narrowing paths and several cross-platform arithmetic overflow conditions. There is only a denial-of-service impact but not confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46384"
},
{
"category": "external",
"summary": "RHBZ#2483482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483482"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46384"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv"
}
],
"release_date": "2026-05-29T19:58:21.535000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder"
},
{
"cve": "CVE-2026-46385",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-05-29T21:01:37.087371+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483475"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system\u0027s CPU is consumed indefinitely until the process is terminated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects Avro array and map decoding functionality in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing excessively large block-count values followed by truncated or invalid data. Because the decoder continued iterating after the underlying reader entered an error state, affected applications may consume excessive CPU resources for extended periods of time, potentially leading to denial of service.\n\nThe currently available analysis demonstrates CPU exhaustion and service disruption but does not demonstrate confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46385"
},
{
"category": "external",
"summary": "RHBZ#2483475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483475"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46385"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w"
}
],
"release_date": "2026-05-29T19:58:59.667000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
},
{
"cve": "CVE-2026-53492",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-01T19:01:34.238078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496130"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "RHBZ#2496130",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
}
],
"release_date": "2026-07-01T17:59:12.552000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
},
{
"cve": "CVE-2026-55677",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-06-26T17:01:45.110038+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2493622"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass route-level access controls, leading to unauthorized information disclosure by reading static files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Echo web framework. The discrepancy in URL path decoding between the router and static file handler allows an unauthenticated attacker to bypass access controls and read arbitrary static files. This could lead to the exposure of sensitive data hosted on affected Red Hat products utilizing the Echo framework for serving static content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"known_not_affected": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55677"
},
{
"category": "external",
"summary": "RHBZ#2493622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55677",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55677"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55677",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55677"
},
{
"category": "external",
"summary": "https://github.com/labstack/echo/security/advisories/GHSA-vfp3-v2gw-7wfq",
"url": "https://github.com/labstack/echo/security/advisories/GHSA-vfp3-v2gw-7wfq"
}
],
"release_date": "2026-06-26T16:15:55.633000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-23T18:36:47+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:180cae1153b4147f4bde808fa626ce8d1970b11714bcffceed4beab911133ae2_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:3386cafd13a0483523176f34c1a0ff5b1d3bc3f99f16504eaf4f250ec25aab1f_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:6c4c5ba04f69becfcdfa348fd79ec31e350bc9b3d6a49a5bc2db372852b25c33_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:ba8baef02a1434c484823b4a913daab81dcc2a590aedad6296e790848522a733_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:195e3f89eee8e33fadedb701918846da6ab1c9e0edf23718e0bf024995f09977_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:21ea61d1524280f483fe2b55f17d4d5510c21e207c6403fa4e5e248f39f70b5c_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:e7aaef898bce215f645dc0b8e28414509bf5dd5805720c6380548f1ab32907cd_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:f7c4bbfa958c00f1f43e8d4470c4b11ee7c5558e1f2df707ca45e179370c3103_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:ae7687a09a81bcf3e2ebe5e3eb08eeddcd600fee1c029a65d99f856084496e1a_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:bbb16ee5a4823ff1d28b7e8696c0dfef512b56421c71bfb3d62a61c1279bf6c0_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:e9b6deffc1ea8be6e26d391f2d11be1391151884fff5c41be3b6cd65d07b7fd0_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:f4184cf8175d4f48ef1ad3fed2a8c337a713a01115ae00d27af199246b920dd6_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:2e53eabb0d89de4dc25f6575124918826b066da62f149b71cde4ebb6e806375c_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:199581add540c329289b169a80c95ffd3fa56bb0e504ca2c2723ef7297b7910f_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:2bf5a1d79ec3b811cd70156ad6476b3c5519d17358f24c0d0fbf5118793bb116_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:3450dc352b5b27412c5069896f5fdb2f3d1a0085a3947fd21e30deef90c09392_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:eefe132d48f531b38e721a246daeded5f0b7d4616d8f9ad0c16cb128b4812b86_amd64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:3641c6586eb7c7c808dd2a90a51b0659112136189fe71a392fc1a786df647da9_s390x",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40c094dbef73513e773ac085242e20cc395591790ed103937a178197ffafab50_arm64",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:43a86eefdd0fdc6fc7e2958138e27979d64443f564d1c32bd92804de96546c6c_ppc64le",
"Red Hat multicluster global hub 1.6.0:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:f356b6ca990f7fb11fd1ada512bbd01f17fa48690b801214c2785dea430d9d7d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy"
}
]
}
RHSA-2026:47149
Vulnerability from csaf_redhat - Published: 2026-07-28 13:38 - Updated: 2026-08-11 15:09Summary
Red Hat Security Advisory: Multicluster Global Hub 1.7.2 security update
Severity
Important
Notes
Topic: Multicluster Global Hub v1.7.2 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Important.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw in Grafana's Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64 | — |
Vendor Fix
fix
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64 | — |
Vendor Fix
fix
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x | — |
Threats
Impact
Important
A flaw was found in Apache Thrift. This vulnerability encompasses an origin validation error, improper limitation of a pathname to a restricted directory (path traversal), and improper neutralization of CRLF sequences in HTTP headers (HTTP request/response splitting). A remote attacker could exploit these issues to trigger uncontrolled resource consumption, leading to a Denial of Service (DoS) condition. Furthermore, path traversal could allow unauthorized access to files, and HTTP request/response splitting might enable other web-based attacks.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x | — |
Workaround
|
Threats
Impact
Important
An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system's CPU is consumed indefinitely until the process is terminated.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.
8.2 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64 | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x | — | ||
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64 | — |
Threats
Impact
Important
A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass route-level access controls, leading to unauthorized information disclosure by reading static files.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64 | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x | — |
Workaround
|
Threats
Impact
Important
References
96 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Multicluster Global Hub v1.7.2 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. \nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat multicluster global hub is a set of components that enable you to import one or more hub clusters and manage them from a single hub cluster.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:47149",
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33376",
"url": "https://access.redhat.com/security/cve/CVE-2026-33376"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33377",
"url": "https://access.redhat.com/security/cve/CVE-2026-33377"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-43870",
"url": "https://access.redhat.com/security/cve/CVE-2026-43870"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46384",
"url": "https://access.redhat.com/security/cve/CVE-2026-46384"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46385",
"url": "https://access.redhat.com/security/cve/CVE-2026-46385"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55677",
"url": "https://access.redhat.com/security/cve/CVE-2026-55677"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47149.json"
}
],
"title": "Red Hat Security Advisory: Multicluster Global Hub 1.7.2 security update",
"tracking": {
"current_release_date": "2026-08-11T15:09:08+00:00",
"generator": {
"date": "2026-08-11T15:09:08+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:47149",
"initial_release_date": "2026-07-28T13:38:43+00:00",
"revision_history": [
{
"date": "2026-07-28T13:38:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T15:09:08+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Multicluster Global Hub 1.7.2",
"product": {
"name": "Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_globalhub:1.7::el9"
}
}
}
],
"category": "product_family",
"name": "Multicluster Global Hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784906628"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Af02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784768332"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Aa0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784768150"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-operator-bundle@sha256%3Aad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle\u0026tag=1784913705"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784307548"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784905257"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784906628"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784768332"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784768150"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Aaba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784307548"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784905257"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3A07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784906628"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3Ad550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784768332"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3Adfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784768150"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3Ad5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784307548"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3A95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784905257"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-grafana-rhel9@sha256%3Ace99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9\u0026tag=1784906628"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-agent-rhel9@sha256%3A5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9\u0026tag=1784768332"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-manager-rhel9@sha256%3A438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9\u0026tag=1784768150"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-rhel9-operator@sha256%3A4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator\u0026tag=1784307548"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"product_id": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-globalhub-postgres-exporter-rhel9@sha256%3Ab009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9\u0026tag=1784905257"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64 as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64 as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64 as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64 as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64 as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64 as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64 as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64 as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64 as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64 as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64 as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x as a component of Multicluster Global Hub 1.7.2",
"product_id": "Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x",
"relates_to_product_reference": "Multicluster Global Hub 1.7.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64"
],
"known_not_affected": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T13:38:43+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33376",
"cwe": {
"id": "CWE-183",
"name": "Permissive List of Allowed Inputs"
},
"discovery_date": "2026-05-13T20:02:51.602978+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477262"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in Grafana\u0027s Auth Proxy IPv6 allow-list defaults to an overly broad /32 mask, potentially allowing unauthorized access. This strictly affects Auth Proxy deployments using IPv6 allow-lists; other authentication methods are unaffected. This has been rated moderate since auth proxy authentication is not enabled by default on grafana shipped on RHEL.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"known_not_affected": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33376"
},
{
"category": "external",
"summary": "RHBZ#2477262",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477262"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33376"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33376"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-33376",
"url": "https://grafana.com/security/security-advisories/cve-2026-33376"
}
],
"release_date": "2026-05-13T19:28:34.473000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T13:38:43+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"category": "workaround",
"details": "To mitigate this issue, explicitly specify the intended IPv6 address mask\u2014typically /128 for a single host\u2014within the Grafana Auth Proxy allow-list configuration. This overrides the incorrect default /32 mask, ensuring that network access restrictions are applied strictly as intended.\nFor RHEL: Update the whitelist directive under the [auth.proxy] section in /etc/grafana/grafana.ini. For example, if ::1 is the desired address, configure it explicitly as ::1/128. A restart of the Grafana service (systemctl restart grafana-server) is required for the changes to take effect.",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default"
},
{
"cve": "CVE-2026-33377",
"cwe": {
"id": "CWE-267",
"name": "Privilege Defined With Unsafe Actions"
},
"discovery_date": "2026-05-13T20:02:01.027996+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477246"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "grafana: Grafana: Privilege escalation via dashboard overwrite",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A privilege escalation flaw exists in Grafana, allowing an authenticated editor with write access to a dashboard to overwrite other dashboards not owned by them. This grants the editor administrative control over the targeted dashboard, potentially leading to unauthorized data manipulation or exposure within the Grafana environment.\n\nRed Hat\u0027s default deployment does not grant edit access to normal users. Hence, this is rated moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"known_not_affected": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33377"
},
{
"category": "external",
"summary": "RHBZ#2477246",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477246"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33377",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33377"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33377"
},
{
"category": "external",
"summary": "https://grafana.com/security/security-advisories/cve-2026-33377",
"url": "https://grafana.com/security/security-advisories/cve-2026-33377"
}
],
"release_date": "2026-05-13T19:28:28.154000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T13:38:43+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"category": "workaround",
"details": "Audit dashboard-level permissions to ensure that write access is granted only to users who should be able to modify each specific dashboard. Revoke per-dashboard write permissions from Editor users who do not strictly require them.",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "grafana: Grafana: Privilege escalation via dashboard overwrite"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64"
],
"known_not_affected": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T13:38:43+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64"
],
"known_not_affected": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T13:38:43+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"known_not_affected": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T13:38:43+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"known_not_affected": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T13:38:43+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-43870",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-05T09:01:02.388589+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466671"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift. This vulnerability encompasses an origin validation error, improper limitation of a pathname to a restricted directory (path traversal), and improper neutralization of CRLF sequences in HTTP headers (HTTP request/response splitting). A remote attacker could exploit these issues to trigger uncontrolled resource consumption, leading to a Denial of Service (DoS) condition. Furthermore, path traversal could allow unauthorized access to files, and HTTP request/response splitting might enable other web-based attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Apache Thrift allows a remote attacker to trigger a denial of service through uncontrolled resource consumption. Additionally, the vulnerability enables path traversal for unauthorized file access and HTTP request/response splitting, potentially leading to further web-based attacks in Red Hat products that integrate Apache Thrift.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"known_not_affected": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43870"
},
{
"category": "external",
"summary": "RHBZ#2466671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43870"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43870",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43870"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/pgtfq44ltc9t63kxcbqmwqzt45pnhqdy",
"url": "https://lists.apache.org/thread/pgtfq44ltc9t63kxcbqmwqzt45pnhqdy"
}
],
"release_date": "2026-05-05T07:45:35.699000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T13:38:43+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "apache-thrift: Apache Thrift: Denial of Service via multiple vulnerabilities"
},
{
"cve": "CVE-2026-46384",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-29T21:02:03.061736+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483482"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects multiple Avro decoder code paths in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing malformed or excessively large integer values that trigger unsafe integer truncation, arithmetic overflow conditions, or invalid memory allocation operations during decoding.\n\nThe vulnerability affects both 32-bit specific integer narrowing paths and several cross-platform arithmetic overflow conditions. There is only a denial-of-service impact but not confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"known_not_affected": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46384"
},
{
"category": "external",
"summary": "RHBZ#2483482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483482"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46384"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv"
}
],
"release_date": "2026-05-29T19:58:21.535000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T13:38:43+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder"
},
{
"cve": "CVE-2026-46385",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-05-29T21:01:37.087371+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483475"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system\u0027s CPU is consumed indefinitely until the process is terminated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects Avro array and map decoding functionality in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing excessively large block-count values followed by truncated or invalid data. Because the decoder continued iterating after the underlying reader entered an error state, affected applications may consume excessive CPU resources for extended periods of time, potentially leading to denial of service.\n\nThe currently available analysis demonstrates CPU exhaustion and service disruption but does not demonstrate confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"known_not_affected": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46385"
},
{
"category": "external",
"summary": "RHBZ#2483475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483475"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46385"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w"
}
],
"release_date": "2026-05-29T19:58:59.667000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T13:38:43+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
],
"known_not_affected": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T13:38:43+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
},
{
"cve": "CVE-2026-53492",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-01T19:01:34.238078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496130"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
],
"known_not_affected": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "RHBZ#2496130",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
}
],
"release_date": "2026-07-01T17:59:12.552000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T13:38:43+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
},
{
"cve": "CVE-2026-55677",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-06-26T17:01:45.110038+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2493622"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass route-level access controls, leading to unauthorized information disclosure by reading static files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Echo web framework. The discrepancy in URL path decoding between the router and static file handler allows an unauthenticated attacker to bypass access controls and read arbitrary static files. This could lead to the exposure of sensitive data hosted on affected Red Hat products utilizing the Echo framework for serving static content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"known_not_affected": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55677"
},
{
"category": "external",
"summary": "RHBZ#2493622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55677",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55677"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55677",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55677"
},
{
"category": "external",
"summary": "https://github.com/labstack/echo/security/advisories/GHSA-vfp3-v2gw-7wfq",
"url": "https://github.com/labstack/echo/security/advisories/GHSA-vfp3-v2gw-7wfq"
}
],
"release_date": "2026-06-26T16:15:55.633000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T13:38:43+00:00",
"details": "For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:5455508edaa16f31321ee2338d2c96bb2332a71f21c0cd562c234faeef25dc48_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:766b01214c66a82c68a5f06377654690ea0b96f2ee5ba82fe915ade2d5bf3768_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:d550343f6f29fbf6bae50c1de593b74767e4264bc58dddc20d5d42488f731164_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9@sha256:f02c581ed6d50d3c90679415312311ff1501c2dcc5178787c18490fabcc5d72c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:07403ee94ddd8865391d250604378ff9450b9f32dc1ed8900231c9debf09670d_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:45c1f1d1a4a678691502a2924783ea2fe8ac3db24673d8226b431c99ffa8ce8a_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:5f911ac9d4d46f2abb9879e00db004ec723b65f52e23e15f8228659fc047b3ae_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9@sha256:ce99eac074e8f3b854457b0367e492153a5ca05d4cffaacb68700f443b5fc6b2_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:438a4489de862a5c1d4c85f053d58ea3d6e6a24ab86459d72f311f9a08388fc7_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:98beb62d0210feae487ab01fd2b8da683ce8e59bb247b50c51aff6e17bee7577_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:a0c3e9d30c376e4be1f42d9aa9013d386a2c8b37206126a71c5205f79e08e34c_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9@sha256:dfe732b782f2b544f43a25b36ae0d3c66e7f5edba843985991a262120d465bef_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-operator-bundle@sha256:ad27a9346c1d7d31d6873a49f49c2c72e8dfd52b9df8d44792f34a8851cbf8c9_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:5969d9f76561444d05bc8ce5ee49ba5c8ed978c0ed3bdd5fa435dd2d2e39e12f_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:7174d7a9171c4ffaf36782dd861747e4a5e74b9dba4a4872a2fae34bd410eea0_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:95194e8c4eaf49d480520c314c35cfaa6d9c80ce0730b4116cd5660e7f88ace2_s390x",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9@sha256:b009a8752b812631585cadd6bf7ec23274ee1861920cf82eb838625a96799d5d_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:40cbdfdf7d2ac32ea02a5223c88f464099a5316cc16ff706e41f821977d5d030_amd64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:4b0e67367dbea7b48e0a3862d5877f7a648bff457c75a3c1f52f4c75f608a54e_arm64",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:aba5ed6470389ad2f83bf9bd87c19c1c4f12c741f366c02a623bb21c819cf0fb_ppc64le",
"Multicluster Global Hub 1.7.2:registry.redhat.io/multicluster-globalhub/multicluster-globalhub-rhel9-operator@sha256:d5787b4dba1bf9ac862c4dd323cf46cfce3276c19a7a415b89b1ab4dcd3a184b_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy"
}
]
}
RHSA-2026:47952
Vulnerability from csaf_redhat - Published: 2026-07-29 14:47 - Updated: 2026-08-11 21:29Summary
Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.12
Severity
Important
Notes
Topic: Logging for Red Hat OpenShift - 6.2.12
Details: Red Hat OpenShift Logging 6.2.12 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Vendor Fix
fix
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Vendor Fix
fix
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 | — |
Workaround
|
Threats
Impact
Important
References
126 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Logging for Red Hat OpenShift - 6.2.12",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Logging 6.2.12 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:47952",
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47952.json"
}
],
"title": "Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.12",
"tracking": {
"current_release_date": "2026-08-11T21:29:29+00:00",
"generator": {
"date": "2026-08-11T21:29:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:47952",
"initial_release_date": "2026-07-29T14:47:37+00:00",
"revision_history": [
{
"date": "2026-07-29T14:47:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T21:29:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Logging for Red Hat OpenShift 6.2",
"product": {
"name": "Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:logging:6.2::el9"
}
}
}
],
"category": "product_family",
"name": "Logging for Red Hat OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1784833274"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-operator-bundle@sha256%3A47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=1784836825"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1784747813"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1784747805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3Aa80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1784748010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3Ae2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1784747884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-operator-bundle@sha256%3A99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=1784751438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Aae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1784747816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Ac89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1784747815"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1784833657"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1784833274"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1784747813"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1784747805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1784748010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1784747884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Ab81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1784747816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1784747815"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1784833657"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1784833274"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1784747813"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Acc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1784747805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1784748010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1784747884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1784747816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1784747815"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1784833657"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1784833274"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1784747813"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1784747805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1784748010"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1784747884"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1784747816"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1784747815"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1784833657"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64 as a component of Logging for Red Hat OpenShift 6.2",
"product_id": "Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T14:47:37+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0052d8243ab61cd2cf9961c8c521feae799b2b296401b8342fd4f5b52673f0a5_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:100e08b8c944de3a46bae4dfa155109bd6fe78479995005f47bcd4beee258924_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:802cd3226296e0feeef79baecd2a4a32fef715af3efb60b5748c9a4ebf02dd08_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9e5f624ea6566612b579400be7648bf2fab8eebcfe4dff301b8cb4da096960e8_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:153ab96fc7d2bab733b62abf87631c839308d31d595d616bf8edfd2cddcabe3f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:1853bf9f3483509135dbdfd8bf708ca6fac04bb5925585d8f7a0d7053823dcfb_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4fd3fcc1466cfad850d25ff825dd3e8542afb391af2d70e50a279d0829d9267c_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:666a815d03869f65903b2a8d87bea5aa965912521512dcb1618b0d06dcb9174e_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:7d4101bfd718c9613264ccc2391d37893897a9ce362b443923f02824256a1a7d_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:99310027ad651fdd6b13d1cc2698f4edeb63eef6340144c66c7f90a185c0ce8d_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:9eeef9597877ed7ac9a1a0d0ec1daa941a503c3e7e38135b4a263f35ad8668e5_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:cc636250743b619bfa997f02a22850503cdbe3df90f77a27259bc1c7184b470e_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1e316441723ad6e2ce988755709a2e2d98406fc58f06942c42b0b701e33b64b7_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:65fb432f914dc0b384a4c7d97a3d520ee127cf9c3b773e7f91b28b7811223b62_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:9634da775abc1c3b64b33a7fe3e891e543caf321099eb8b989f9c833471047b2_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a80f627cee8092acfa7f248c90f162e04d9435aa6aafa38365b68a341bdc4039_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:99ad45fe6f420e59b6cc207b92e14f4e2637a1f5a4daac0776075aa365419d88_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:161adf962803dfcc53ffedfe2cdda056760d227b0e39a9f71dd93aec8392630f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:6f0b3b3f82757b7c908a027466f6f58adb6ef44732af52c8d80f4c2e686b6859_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:8da02916a76bc365fdd07f25ecd6e0ea9cf5f9b61a8368a2681b98eaee5de3b6_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2574a9506247daf24517c927f3fc300be1a92941e9a637a6ac8ca7c8c8a3e53_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3f354761f4982ed497a7a6a9456515b42574e1eee062d1e28676ecb98f205c2e_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:6d706b347ad30aaa388fe171fb2b16b15a3f60a99443831ee90bf43308f61b60_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:ae8aaecae41cea28ac9a59468024942b9528de7b150453c99ceb1eb1ed8d921a_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b81b71052c82ae685491fbdaf45c5e5da0ac8a322ae4697ad8ea061cbd8eaf8a_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:134bafee4bb7fcf1fbd1242ca7b5a5ce99296eed19b982f2fa0fab69aa596881_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:22f133df7b02ce4cc6e8b8dc64d74d79ea7ba9a662811b244701f1e1a01aec0f_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:6ce28aaad7cb3b99c4c332e3b465088007498b2414f04fc6e4d64338aeda193a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c89b17564cd8fd241ffa9d10d51d8188c0a89ad747931536f4988bc5e987ec36_amd64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3c4bb088d49442d4a97a315ef00646a59b64a761d4b82cc7aec57cc1ed35d2a8_arm64",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:7049a300a62a6a40dd8067f250772fcb85e82d9771e553b8a04184e1e3014132_s390x",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:80988b355a96553bff20c13429bc7d137867ac26909bf05c310376ca4c64598a_ppc64le",
"Logging for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:8f2477cef6ef3cd7c302127b5b9e7394047f62e7e0016935e1d06fdd07d3e784_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
}
]
}
RHSA-2026:48771
Vulnerability from csaf_redhat - Published: 2026-07-30 13:15 - Updated: 2026-08-11 20:43Summary
Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
Severity
Important
Notes
Topic: The 1.4.3 release of the RHTAS CLIs.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS CLI Stack images for RHTAS 1.4.3
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
References
126 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.3 release of the RHTAS CLIs.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS CLI Stack images for RHTAS 1.4.3",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:48771",
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48771.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release",
"tracking": {
"current_release_date": "2026-08-11T20:43:37+00:00",
"generator": {
"date": "2026-08-11T20:43:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:48771",
"initial_release_date": "2026-07-30T13:15:29+00:00",
"revision_history": [
{
"date": "2026-07-30T13:15:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T20:43:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product_id": "conforma-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_amd64.tar.gz\u0026checksum=sha256:ba0319fcf14ce9af09aea60ac6ded7493fcc3805d657ab3cafcccce258cdbc24\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product_id": "cosign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_amd64.tar.gz\u0026checksum=sha256:89fe2f185b14bb9cf8cd5fdc2997b11b6a3d6e344c29d9bfb0c6678fc4e789d2\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_amd64.tar.gz\u0026checksum=sha256:8e144593f7988904a732c9b2984b426a5a0656d054ae2bc4d990721814437c6a\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_id": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_amd64.tar.gz\u0026checksum=sha256:ddbb1fe6762a246b031d1ad6684adb4fa6ebada079242d439c4d0bb564426d09\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_amd64.tar.gz\u0026checksum=sha256:56ecfb9f0a96bf7e8912d4c7b80ff7da1bb783eb68466b38dca7206434441acb\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product_id": "rekor-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_amd64.tar.gz\u0026checksum=sha256:55c0c62a6c54e8737b2cc6cbd37a1a49be5807da1097124ed5d39173731d610e\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product_id": "trillian-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_darwin_amd64.tar.gz\u0026checksum=sha256:8031a91d5d2fd81e62d364a3e1a65f3cab696640a334f36eaf0de04252771358\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "amd64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product_id": "conforma-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_arm64.tar.gz\u0026checksum=sha256:f94cb68da5dd2e397443863c8306ba903277dab26bfc8bf5ae1f3d9e7a7bccf3\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product_id": "cosign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_arm64.tar.gz\u0026checksum=sha256:be6c8f783a6606938968a547dddffe8c860f404a21d61d0757a7e173d9a87860\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_arm64.tar.gz\u0026checksum=sha256:5cc43b5d7aaa3829c93f21d95b9c4a27f08043cfb2b5e5b6e50fd39566def195\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_id": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_arm64.tar.gz\u0026checksum=sha256:0a0667c88d39d6208f298ba84440f55e3054bc35c3dffcf86039bda233a82f89\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_arm64.tar.gz\u0026checksum=sha256:eae6ee618548fc7febb3256c8941f1a0ec829b8476e66078efd84dadff97d51f\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product_id": "rekor-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_arm64.tar.gz\u0026checksum=sha256:2e5d2e6a36d03862962cc8cbe0609f8b090f1319187763c188e268e149a211a6\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product_id": "trillian-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_darwin_arm64.tar.gz\u0026checksum=sha256:b90f2ec19c2e8790a31d523aa75da5d31cc223ca207c25f720e0e893ceedcb2b\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "arm64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64",
"product": {
"name": "conforma-cli-stack-v1-4@amd64",
"product_id": "conforma-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_amd64.tar.gz\u0026checksum=sha256:9d67d0f809f8576c253ac2437aa7a1eb90a65e2f28da1f5c7ee4c4fe568f2d55\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64",
"product": {
"name": "cosign-cli-stack-v1-4@amd64",
"product_id": "cosign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_amd64.tar.gz\u0026checksum=sha256:4a65933981e9eeb85e0a1b270411b44bde2ce3d008201a894e2af6a5440fe25c\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_amd64.tar.gz\u0026checksum=sha256:dcddc1ae6817d0595ce76e65fd11a7de32706645410ff891e160a641084ad379\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64",
"product_id": "gitsign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_amd64.tar.gz\u0026checksum=sha256:772835071524d4670c44f48e73166118f088baf567d2019532d45c492c15c6de\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64",
"product_id": "model-transparency-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_pkcs11_linux_amd64.tar.gz\u0026checksum=sha256:031c0547d645585a70a99461f35ae3a77a1e30790336915c6000e7bedd971b6f\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64",
"product": {
"name": "rekor-cli-stack-v1-4@amd64",
"product_id": "rekor-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_amd64.tar.gz\u0026checksum=sha256:7dec4aff3daf64908417ca9ff5fa3822b6c41dcc63c20b832f6eb7963374b8d8\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64",
"product": {
"name": "trillian-cli-stack-v1-4@amd64",
"product_id": "trillian-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_linux_amd64.tar.gz\u0026checksum=sha256:42cfc2fd535bccc2bc623c61f736483313bd0f662f21501f42e902349435d15a\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "tuftool-cli-stack-v1-4@amd64",
"product": {
"name": "tuftool-cli-stack-v1-4@amd64",
"product_id": "tuftool-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/tuftool-cli-stack-v1-4@1.4.3?filename=tuftool_linux_amd64.tar.gz\u0026checksum=sha256:5b288bfedf17b2a07486f16457b8405d34cf4081f76534b678fa7cdcd413f82b\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64",
"product": {
"name": "conforma-cli-stack-v1-4@arm64",
"product_id": "conforma-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_arm64.tar.gz\u0026checksum=sha256:d22c843c2cb8dad6b525614cddf62d20e2536260ddb9e8215a68ba34950ecda9\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64",
"product": {
"name": "cosign-cli-stack-v1-4@arm64",
"product_id": "cosign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_arm64.tar.gz\u0026checksum=sha256:e8ff0ea9f5104e81d9b57b297d65c41b760556d70c98e8e21a612beb242ff731\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_arm64.tar.gz\u0026checksum=sha256:b2418f32be12f4e93c6bf993daa11243fa40f3aeafd46422b1f3badc7ca4b532\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64",
"product_id": "gitsign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_arm64.tar.gz\u0026checksum=sha256:b8f320b723bb722565a78b51783bc750c28b8cc02ef6a08698e14cdb7773f0a2\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64",
"product_id": "model-transparency-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_pkcs11_linux_arm64.tar.gz\u0026checksum=sha256:63182bbf957c0e156e9f695776875f7a53c9a187ceb14caae2b03b0f2ce4df43\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64",
"product": {
"name": "rekor-cli-stack-v1-4@arm64",
"product_id": "rekor-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_arm64.tar.gz\u0026checksum=sha256:aa13a0ea35439464cf241988216a8dd2c9e40ad846e243ea9dae9b49b4a11ec3\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64",
"product": {
"name": "trillian-cli-stack-v1-4@arm64",
"product_id": "trillian-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_linux_arm64.tar.gz\u0026checksum=sha256:91d5b66c1d54c0efd257e4902a6692f51edb93e155643b8e6b50dc275c1bb048\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@ppc64le",
"product": {
"name": "conforma-cli-stack-v1-4@ppc64le",
"product_id": "conforma-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_ppc64le.tar.gz\u0026checksum=sha256:18bd60a0143e998178e02fa7673105259e48fcbe9c32207a3bdc0d66daab8f8a\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@ppc64le",
"product": {
"name": "cosign-cli-stack-v1-4@ppc64le",
"product_id": "cosign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_ppc64le.tar.gz\u0026checksum=sha256:179353a55fe09a3031ecb6d7ea83f692eeafa948fed8df93f5a6e08fd95f9729\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_ppc64le.tar.gz\u0026checksum=sha256:8f906cfb20e8593cfb65aba0f64900b9897eb5ca00ef76f99b08a2192af027be\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product": {
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product_id": "gitsign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_ppc64le.tar.gz\u0026checksum=sha256:a05ff4b720561e4eae766ecd8463f56d566819505ee6d0254b01c1920dcd8af8\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product": {
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product_id": "model-transparency-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_pkcs11_linux_ppc64le.tar.gz\u0026checksum=sha256:4fc781761f359570a87defdad0e8f9992e3b84dcdf59ff72fb0ea60df210de83\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@ppc64le",
"product": {
"name": "rekor-cli-stack-v1-4@ppc64le",
"product_id": "rekor-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_ppc64le.tar.gz\u0026checksum=sha256:b36ce275d5e6735e69c51233ebac81aac6dc3f48c03ebd03ea6e548e5c4f02d7\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@ppc64le",
"product": {
"name": "trillian-cli-stack-v1-4@ppc64le",
"product_id": "trillian-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_linux_ppc64le.tar.gz\u0026checksum=sha256:43e2b76086c4c7b96304da59f98dbcaedb61e8f6dfa9ad40ee3c0a9dcc70b410\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@s390x",
"product": {
"name": "conforma-cli-stack-v1-4@s390x",
"product_id": "conforma-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_s390x.tar.gz\u0026checksum=sha256:2fe947638045e305fc2ee1a648f55e2b0e3215fe590ab3eaa0d7ac9e79544889\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@s390x",
"product": {
"name": "cosign-cli-stack-v1-4@s390x",
"product_id": "cosign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_s390x.tar.gz\u0026checksum=sha256:3681aea2d65788ba26a64e31acbb96051458b8075b1482b4f338b7ba12a6b289\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_s390x.tar.gz\u0026checksum=sha256:69498733a8e39078a9a5627a2dcfced108c0ecc7965fd2d16c25fc6e2feb3858\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@s390x",
"product": {
"name": "gitsign-cli-stack-v1-4@s390x",
"product_id": "gitsign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_s390x.tar.gz\u0026checksum=sha256:3e7eb54efaeb4faa1c6b5c64d5017b5afd6290f5202695bf1220acf25a2ad026\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@s390x",
"product": {
"name": "model-transparency-cli-stack-v1-4@s390x",
"product_id": "model-transparency-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_pkcs11_linux_s390x.tar.gz\u0026checksum=sha256:a41fc6dafc44a3ef9cc45b71dcc557a4f633a3b3e13ea7672a77dd6666cfa9c8\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@s390x",
"product": {
"name": "rekor-cli-stack-v1-4@s390x",
"product_id": "rekor-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_s390x.tar.gz\u0026checksum=sha256:2afe6927478749fd550190111781d8ad529294bf0a7570d7059f14eb9ced52be\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@s390x",
"product": {
"name": "trillian-cli-stack-v1-4@s390x",
"product_id": "trillian-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_linux_s390x.tar.gz\u0026checksum=sha256:6fed7506d560d15237996996a02e37f0724e904c1fd4911e12b0896823881b36\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product_id": "conforma-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_windows_amd64.zip\u0026checksum=sha256:aab8df482a3af57bed8d3d5e707bad83a4df4df78dfdd1abee09f8661cc77292\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product_id": "cosign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_windows_amd64.zip\u0026checksum=sha256:ed5e15b31fbf8730930ca0ca372efaea8e036703dc662b0a292ff632e8a538f5\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_windows_amd64.zip\u0026checksum=sha256:8397786f43ddc3e272fe73880a2947eb56fb5120ce3442f7bd6b4f0ee4fb8d28\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product_id": "gitsign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_windows_amd64.zip\u0026checksum=sha256:5163527dc7d890b6d05d66c353a67702d148c43c66aaec366dcf90e5307533dc\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_id": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_windows_amd64.exe.gz\u0026checksum=sha256:90f187d79b8dfd39cca62120fdabbfc685c9f99c7c7f16f80dbf296defef72e1\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product_id": "rekor-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_windows_amd64.zip\u0026checksum=sha256:8e1fe853c7a5594822fe91cdc62e37b2851e49bb70a89fa47c662dc6ae4ddc7c\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product_id": "trillian-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_windows_amd64.zip\u0026checksum=sha256:8a2bd8d3f3d2e1624e6f1a4b862c3c0d8edd17663d0b3f4625a3a0b32232f8ca\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "amd64_windows"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64"
},
"product_reference": "conforma-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64"
},
"product_reference": "conforma-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le"
},
"product_reference": "conforma-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
},
"product_reference": "conforma-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64"
},
"product_reference": "cosign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64"
},
"product_reference": "cosign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le"
},
"product_reference": "cosign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x"
},
"product_reference": "cosign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le"
},
"product_reference": "gitsign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x"
},
"product_reference": "gitsign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le"
},
"product_reference": "model-transparency-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x"
},
"product_reference": "model-transparency-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64"
},
"product_reference": "rekor-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64"
},
"product_reference": "rekor-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le"
},
"product_reference": "rekor-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x"
},
"product_reference": "rekor-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64"
},
"product_reference": "trillian-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64"
},
"product_reference": "trillian-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le"
},
"product_reference": "trillian-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x"
},
"product_reference": "trillian-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tuftool-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
},
"product_reference": "tuftool-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:49767
Vulnerability from csaf_redhat - Published: 2026-08-03 18:13 - Updated: 2026-08-11 20:43Summary
Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
Severity
Important
Notes
Topic: The 1.4.3 release of the RHTAS CLIs.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS CLI Stack images for RHTAS 1.4.3
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
References
126 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.3 release of the RHTAS CLIs.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS CLI Stack images for RHTAS 1.4.3",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:49767",
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49767.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release",
"tracking": {
"current_release_date": "2026-08-11T20:43:37+00:00",
"generator": {
"date": "2026-08-11T20:43:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:49767",
"initial_release_date": "2026-08-03T18:13:05+00:00",
"revision_history": [
{
"date": "2026-08-03T18:13:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T20:43:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product_id": "gitsign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_windows_amd64.zip\u0026checksum=sha256%3A6fef4f4b207582acdc89736dba2155dabed565b8946be14211a4b64e744cb72b\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_id": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_windows_amd64.exe.gz\u0026checksum=sha256%3A54414f4e41a7b7324464df9ba51a5c5c7a36bdf2a10243e18a18c0a07a4c7250\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product_id": "rekor-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_windows_amd64.zip\u0026checksum=sha256%3A99b32d68816507be2304422886bd7991c0f0796ff5e80f3cb2e5df573dfd3fdd\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product_id": "trillian-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_windows_amd64.zip\u0026checksum=sha256%3A1426e9dba9f83dc9f9e7e74a8930d223cbc9179860aeb5dcc988f5f1b06eec70\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product_id": "conforma-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_windows_amd64.zip\u0026checksum=sha256%3Ab1e762e1277bf10d0ea1cd06268d521f827b41adff7898d3f2e90ef1f92b9459\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product_id": "cosign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_windows_amd64.zip\u0026checksum=sha256%3A38f4682466f7f1f9b6f0d0fa8b3faa635c94a604a0cb503280a139ee472fe0e6\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_windows_amd64.zip\u0026checksum=sha256%3A71479daf6769fff4772c5e17684f7f86b91b7eeaffba0144df6f8fe78b4d0306\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64_windows"
},
{
"branches": [
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3A42582688ba3a4c6d1eebba9ffbc385f2f606ec376bac977395c6c31e9d27f575\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product_id": "rekor-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3Aca3361e621846d985e2b04e77138097cd679402c88ad5ee7aa281cc33e89a7fe\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product_id": "trillian-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_darwin_amd64.tar.gz\u0026checksum=sha256%3Aac86c9f4eadfea26a37e04b62cd79b1fb4a51eccfaac17f2e1f8fefa1d3609e8\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product_id": "conforma-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_amd64.tar.gz\u0026checksum=sha256%3Ae75dc3d7df27fa5532642887c6a2989a5997507da4ff6677cc09b32b7d4f0cd0\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product_id": "cosign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_amd64.tar.gz\u0026checksum=sha256%3Ad6cc0d62c9f820ee8856ef2cf766cb981c0a898c1bc2e5da541298b92fe9f48d\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_amd64.tar.gz\u0026checksum=sha256%3A4dc2de8a2c12c9499f0101148b7864680b4c74bdf4fb44c02d2a7966e63b978d\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_id": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3A6b8a2b930fbd3695d0555585c412594b30b2506d9f9acfb6b6339c742a91a6ba\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3A2f2a611fcdb377b951461c5d9bdd588cba5d2b276f7f0def5ff10c51ff7c6211\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product_id": "rekor-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3A96e5b122199bfc8972d090d3b62b6a1d3b739b3b2e7cb5afb00ffaff07484bbd\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product_id": "trillian-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_darwin_arm64.tar.gz\u0026checksum=sha256%3A51c236fb7321309645f0363e712a7e208746167b52634d4591ca7afc3ebe35f4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product_id": "conforma-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_arm64.tar.gz\u0026checksum=sha256%3Adf7bf266fd09164656e6e0b16935f1028dcd930d02868df452f76f073a766128\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product_id": "cosign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_arm64.tar.gz\u0026checksum=sha256%3Ac89bf59960c1cdc08f91266782e8261c9ec14f2e9a6a54ba2702febb6f3edcf8\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_arm64.tar.gz\u0026checksum=sha256%3Adfed759f50eaf9ca63716d1517ec14ab32fe83f908a49432bee34b2b7fa12f74\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_id": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3Ab5c0783747fb834466f4e9f0e92ebd3dff94181d2b917f030ebd0b6c28f29c46\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "arm64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64",
"product_id": "model-transparency-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_amd64.tar.gz\u0026checksum=sha256%3Ad11f6fdf2936505d92011565b3191fede6e0c42361f3374f407104b0183d9650\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64",
"product": {
"name": "rekor-cli-stack-v1-4@amd64",
"product_id": "rekor-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_amd64.tar.gz\u0026checksum=sha256%3Ae8f93b6f40448046ea096ccbe68d3770108ee5ee35fbec23bb9f6aa00bf961f0\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64",
"product": {
"name": "trillian-cli-stack-v1-4@amd64",
"product_id": "trillian-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_amd64.tar.gz\u0026checksum=sha256%3A4a1f79d40b04cb87ba8278793ab6cadf8139d4f013911501ac2b61c1342f8bf4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "tuftool-cli-stack-v1-4@amd64",
"product": {
"name": "tuftool-cli-stack-v1-4@amd64",
"product_id": "tuftool-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/tuftool-cli-stack-v1-4@1.4.3?filename=tuftool_linux_amd64.tar.gz\u0026checksum=sha256%3Af0274ee12240fd7d6eddda2b85edfe71debf640f881f8f87864e07607226b281\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64",
"product": {
"name": "conforma-cli-stack-v1-4@amd64",
"product_id": "conforma-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_amd64.tar.gz\u0026checksum=sha256%3A849c17c815b098e234b5d2e7de8a594d74aeceef9b275b7290a6c39cc87606da\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64",
"product": {
"name": "cosign-cli-stack-v1-4@amd64",
"product_id": "cosign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_amd64.tar.gz\u0026checksum=sha256%3A40448bcf19dd95ac19281503edad38837ee754210b0910ffa33ce01616bc483d\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_amd64.tar.gz\u0026checksum=sha256%3Afdec9fafb327bd19e37a327ff8afdf81113839105a891ae43a4115387f448d80\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64",
"product_id": "gitsign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_amd64.tar.gz\u0026checksum=sha256%3Ab41a91d8aaafd27f321e5c6afaa2f80a1a192b65490ed83d06fd9d1a13cd2259\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64",
"product_id": "model-transparency-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_arm64.tar.gz\u0026checksum=sha256%3Af41c6465b0729d50b466881c215e7c033ca8d325001b1a572c8259542e21a751\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64",
"product": {
"name": "rekor-cli-stack-v1-4@arm64",
"product_id": "rekor-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_arm64.tar.gz\u0026checksum=sha256%3A3a0f8b948f7307efd546408f0b2ca5de177d53ddbe124edc78ffd3f8d81571ed\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64",
"product": {
"name": "trillian-cli-stack-v1-4@arm64",
"product_id": "trillian-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_arm64.tar.gz\u0026checksum=sha256%3Ad0ef9416f3dab3fc977311aa9ee56c6eda926b09a5e26310dc0fd633c0fbcc62\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64",
"product": {
"name": "conforma-cli-stack-v1-4@arm64",
"product_id": "conforma-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_arm64.tar.gz\u0026checksum=sha256%3Ad84c73bc689218700d9134a408e24dc01a28b1366920ebbd7b74837729c4be49\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64",
"product": {
"name": "cosign-cli-stack-v1-4@arm64",
"product_id": "cosign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_arm64.tar.gz\u0026checksum=sha256%3A9ec55cf4fdae8edd492ca4eb70540edf6cff7a9d66abd537e4b16e197d35c2c4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_arm64.tar.gz\u0026checksum=sha256%3A4e8e133040df495b1dfb5c777c7e00e839829594c4e3b5238103d6cede6732bf\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64",
"product_id": "gitsign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_arm64.tar.gz\u0026checksum=sha256%3Aad344e63797afc8efb929973badbdd975c84bacb07043882e87966fafc5dde31\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product": {
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product_id": "model-transparency-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3A41c21c8e9f7bb881853fb9ce09136526010d0d4abf2f76549c76ca6f40740fba\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@ppc64le",
"product": {
"name": "rekor-cli-stack-v1-4@ppc64le",
"product_id": "rekor-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3Aad7261c944910196f7aab08e1a24dc77996d107a339d74da1d4196fd96a421e6\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@ppc64le",
"product": {
"name": "trillian-cli-stack-v1-4@ppc64le",
"product_id": "trillian-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_ppc64le.tar.gz\u0026checksum=sha256%3A96991d095eb2dd8472471d377522f9e6ef36153292bd381b022b554de4539b19\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@ppc64le",
"product": {
"name": "conforma-cli-stack-v1-4@ppc64le",
"product_id": "conforma-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_ppc64le.tar.gz\u0026checksum=sha256%3A1a38cf42d9815165e7ba168a2ccd08d4183f30690d60779ff0365d348c9b6c73\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@ppc64le",
"product": {
"name": "cosign-cli-stack-v1-4@ppc64le",
"product_id": "cosign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_ppc64le.tar.gz\u0026checksum=sha256%3Aeb9a30596e16a751e664789d3cf9cec89bbbaade890df56c46e6f18562cece21\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_ppc64le.tar.gz\u0026checksum=sha256%3A130934550be2ea638bcf42f0f7b987b373b31b6a1a43a73b506c7a13a76d2d48\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product": {
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product_id": "gitsign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3A98f8bcf03a7241fb6e97fc71c10d36600066791a07423876ede59c950eb61f1b\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@s390x",
"product": {
"name": "model-transparency-cli-stack-v1-4@s390x",
"product_id": "model-transparency-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_s390x.tar.gz\u0026checksum=sha256%3A2655b8c2c57d107325710857fb7ca22c439b5466abd8adf60792b9821da9efc4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@s390x",
"product": {
"name": "rekor-cli-stack-v1-4@s390x",
"product_id": "rekor-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_s390x.tar.gz\u0026checksum=sha256%3A0d8eadf8b8aee4e8e4eee350ef54c21ca921f9d3678157c8710d3ea3fb5d2215\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@s390x",
"product": {
"name": "trillian-cli-stack-v1-4@s390x",
"product_id": "trillian-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_s390x.tar.gz\u0026checksum=sha256%3A029eadc83ace4ec12004539731d3b11817a0939c929bfa1895dad45bf4233899\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@s390x",
"product": {
"name": "conforma-cli-stack-v1-4@s390x",
"product_id": "conforma-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_s390x.tar.gz\u0026checksum=sha256%3Aaea309944ca64070e736e4695e9624ee4405cd5dd6c5b5c3dd85e15ff8c03554\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@s390x",
"product": {
"name": "cosign-cli-stack-v1-4@s390x",
"product_id": "cosign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_s390x.tar.gz\u0026checksum=sha256%3Ace65e11339269a1e1749aadef3add5b9d3b7487f3db8f358b4c0d2aba98e2d7a\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_s390x.tar.gz\u0026checksum=sha256%3A9fe9680fe67969fedfceb3993930056de422ff1836886145db8512ea18110368\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@s390x",
"product": {
"name": "gitsign-cli-stack-v1-4@s390x",
"product_id": "gitsign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_s390x.tar.gz\u0026checksum=sha256%3Aec9f094da7b0307fdc2d8440ca421caaaff22ab337c796fadeb7009313b6c564\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64"
},
"product_reference": "conforma-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64"
},
"product_reference": "conforma-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le"
},
"product_reference": "conforma-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
},
"product_reference": "conforma-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64"
},
"product_reference": "cosign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64"
},
"product_reference": "cosign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le"
},
"product_reference": "cosign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x"
},
"product_reference": "cosign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le"
},
"product_reference": "gitsign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x"
},
"product_reference": "gitsign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le"
},
"product_reference": "model-transparency-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x"
},
"product_reference": "model-transparency-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64"
},
"product_reference": "rekor-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64"
},
"product_reference": "rekor-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le"
},
"product_reference": "rekor-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x"
},
"product_reference": "rekor-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64"
},
"product_reference": "trillian-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64"
},
"product_reference": "trillian-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le"
},
"product_reference": "trillian-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x"
},
"product_reference": "trillian-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tuftool-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
},
"product_reference": "tuftool-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:50843
Vulnerability from csaf_redhat - Published: 2026-08-05 15:41 - Updated: 2026-08-11 21:29Summary
Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.16
Severity
Important
Notes
Topic: Logging for Red Hat OpenShift - 6.0.16
Details: Red Hat OpenShift Logging 6.0.16 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64 | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le | — | ||
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x | — |
Workaround
|
Threats
Impact
Important
References
86 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Logging for Red Hat OpenShift - 6.0.16",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Logging 6.0.16 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:50843",
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50843.json"
}
],
"title": "Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.16",
"tracking": {
"current_release_date": "2026-08-11T21:29:58+00:00",
"generator": {
"date": "2026-08-11T21:29:58+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:50843",
"initial_release_date": "2026-08-05T15:41:43+00:00",
"revision_history": [
{
"date": "2026-08-05T15:41:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-11T21:29:58+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Logging for Red Hat OpenShift 6.0",
"product": {
"name": "Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:logging:6.0::el9"
}
}
}
],
"category": "product_family",
"name": "Logging for Red Hat OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1785418871"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-operator-bundle@sha256%3Ac3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=1785422066"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3Abef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1785418851"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1785418839"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1785419067"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1785418915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-operator-bundle@sha256%3A53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=1785422064"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Ad2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1785418855"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1785418852"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1785419250"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1785418871"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1785418851"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Ab5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1785418839"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1785419067"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1785418915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Aa2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1785418855"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Aa55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1785418852"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1785419250"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1785418871"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1785418851"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Ab4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1785418839"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1785419067"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3Ad45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1785418915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1785418855"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Aa553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1785418852"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3Aff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1785419250"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1785418871"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1785418851"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1785418839"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1785419067"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3Ad59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1785418915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1785418855"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Ae00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1785418852"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1785419250"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64 as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x as a component of Logging for Red Hat OpenShift 6.0",
"product_id": "Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x",
"relates_to_product_reference": "Logging for Red Hat OpenShift 6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T15:41:43+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T15:41:43+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T15:41:43+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T15:41:43+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T15:41:43+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T15:41:43+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T15:41:43+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T15:41:43+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T15:41:43+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64"
],
"known_not_affected": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T15:41:43+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:0a3cbe776357421fe89b45e9f5da54259fb91825925660e9efd2e2058b82672e_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:4a4be2066a79e4d4779d174e8843f43de6d8e643d8136b7e7d78d12c27788fbe_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:6bf40033c56ff4b18d70a84b86097d5edf3c640567a332768e229a52c16ab25a_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:92047276401431f998d391f0366d33d90a4029a6c73ed89f7f1d916f99ac26e0_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:369ddc0d5aa123640e8a719e8e585af2cc8b1056f36a7d7f6c9362a774a26081_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:3b3c5451e18fe1ed223ca20bec6a2af114ef47f82891de3758c11b24abc00bee_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6202d1c557103a08a7ab222049ce45da93c6178c0fdbd778aa4b409877f5c7e5_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:bef988925bd6f52d407fa498baabafadab6dcfbbb4986fc80ffaf7c05cda264b_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6c13d56ccaea21e2b92777800c74835899ed22b1ae9090a98a9b449ee8b582ed_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:8ec20dee97b97f503e3893bea2e0f791cde84713c1d4a137ee0b44eab1e7c17b_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b4dbce1521cbbf4fc466820a51422e8b05aba5b35d700bacfa2766f53ff30ba8_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:b5103b88ec32ec7be0b17de57add891f64a7629e7475e4e77db6079b30c9b877_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:02d7bfd18770557675eba97e03a460a57513a258fbac418fe8fc8ca11efd395d_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:3cc618c7311d7770113f7fdc461bfcf95ffe5bc9c4fca4e972cc954cb9d23fb9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4e6a7d903b99e3642158eb12058b5bff69bacaccb18e809bfe3d623d997bef7e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:5c9f1b213c785c7dcba7a4553c7cfac258d16df281c023b7d8fa357592ee0117_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:53b8c48918c6801dc54b5503c88514263e904b493799a5721d5a9a4bb0236fd9_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:1a930ff4b2a73ac06a7fd42f83eabd937cf11357e7ff9d6d2ae7a6dfe8561f71_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:81ff53215a86347b5b0455ff7348d9cdebd832ab18b862038a04f7788abbbfc6_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d45818a542571917247e98749c920f6bd7e349f5169d913b6fe5c21dcb15a82e_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d59351cdcac44e2709d56ba5e8ef64dd58343594599e8680bf3f9a569f9f5de7_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:1b1badc0f7eed34ec9470f363de2d937d474c320faa7716fa92ec354a91cb062_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:220506ea930bc8f1b609c9ef58d754dcc81a99ee056e6ae60ee1e3b92e63e15c_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a2fa2922cd00d4117b3f7fac7850685ab8dc2c37bac71f127928c96b64379b41_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:d2fbdc365db49efb8f12d3232c21c54ea54986c9f2c96f2f7ce7f821f5f71889_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:74bed7bb202e555583267183d21cb3bd7c6a3f5f2ae6c99732ccd48bac691cdc_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a55144687551d73c998535a2ea5676c42bcf5325a0ebaeb4f6be0074b2875c4f_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a553bd05359427feb841f8e5376de97303b378644616a0dba6cbd8290f23d678_s390x",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:e00156dabcb83f59837d8f72738b697e9846d1bfacdf0ab143f80233c503a5b8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:01d8fd9bcac9666d491314f18cb63378f9db84ab9d96a265494a7f25a0216d9c_arm64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:11da8ed81a4bbfdfe17cd1c96a3d9e9583c5cecad712a76f3d85419a7c6383fb_amd64",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:85e122086c252c0f10966eb60768a70210754ccde6eec983430d7133cdcdfad8_ppc64le",
"Logging for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ff82fa595072d9fdd8fc67e0e38906baad92eb6faced4a9ffdf872f2e59be4d9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…